npm --depth is broken, using npmlist for now