update npm manifest