upgrade npm to fix prepublish issues