Why can't we freeze the version of globally installed packages with npm?