don't ship with node_modules, use npm deps instead