fix install-npm latest release tag and idempotent symlink create