remove the bad md5 package from package.json