fix(external): use safe npm install for dws

fix(external): use safe npm install for dws #1429