guarding express npm from breaking changes