npm/invalidation