fix npm.org shasum thing