Dependency Management Practices for the npm Software Ecosystem