npm: add a prepublish script