This module is for browsers - it's OK to use only one version of node (for buster)
no need to upgrade npm - we'll just trust things from now on