npm install with --unsafe-perm