DO NOT remove the : character when sanitizing paths. That breaks NPM for packages