Overall it looks good to me. I also checked npm¹ and it agrees that there are no dependencies for this package. Do you happen to know why there's a test directory installed? I don't know if it's supposed to be there but it seems strange to me $ tree /gnu/store/sgq5frrlnpip3sjjsqjrwc4czys1ry8a-node-semver-7.2.1 -d /gnu/store/sgq5frrlnpip3sjjsqjrwc4czys1ry8a-node-semver-7.2.1 ├── bin ├── lib │   └── node_modules │   └── semver │   ├── bin │   ├── classes │   ├── functions │   ├── internal │   ├── ranges │   ├── tap-snapshots │   └── test │   ├── bin │   ├── classes │   ├── fixtures │   ├── functions │   ├── internal │   └── ranges └── share └── doc └── node-semver-7.2.1 ¹ https://www.npmjs.com/package/semver -- Efraim Flashner אפרים פלשנר GPG key = A28B F40C 3E55 1372 662D 14F7 41AA E7DC CA3D 8351 Confidentiality cannot be guaranteed on emails sent or received unencrypted