no semver2 because npm is dumb
1.2.4