npm-dedupe with matching versions of transitive deps