core: bumping npm version