upgrade npm for ^ ranges