add npm safety install