npm doesn't force-publish pre-existing versions