put bower in `devDependencies` then use bower install directly, it will uses ./node_modules/.bin/bower and will not pollute userspace.

we can't force people to install bower globally, that's not a good solution.