A study over npm dependency graph