hard code version information. some npm versions don't understand ^