old NPM doesn't support "^..." -- bummer