added note to relax ssl on npm