fix(npm): resolve bare npm specifier when latest is too new for min dependency age (#36619)