validate tag == package.json version - refs #37