move npm out of node_modules