use more recent npm as it fails on some dependency version strings