npm perms are annoying