npm is dumb