default to ^ instead of ~

See:
https://github.com/npm/npm/issues/4587