allow range for npm