removed npm since it has a stupid auth token in it