fix illegal npm name
clean up residual gh templating
better to use npm install to avoid missing dependencies