specify supported npm versions in the package.json