Don't upgrade npm, don't use '^'