npm dependency bug fix