its very easy to have NPM emit warnings that your npm_remote_module deps dont match what you have in package.json tho