disable npm for now, todo: better hosts updater