is there a way to do an npm update dry run?