deal with apparent npm semver violations