package-lock=false update-notifier=false legacy-peer-deps=true