npm/allow-string