bugfix: 'latest' is not supported in package.json