use a more permissive license
update license for npm