Don't touch package.json version manually
Guard against multiple calls to callback in cache read.