package json overrides npm version