hoodie.js dependency still points to git, not npm