I've seen it checked for modules installed by npm install, but not for the root package