broken package.json in npm@5