diff --git a/nodejs-csso-cli/.SRCINFO b/nodejs-csso-cli/.SRCINFO
index ff3a2d1..146185b 100644
--- a/nodejs-csso-cli/.SRCINFO
+++ b/nodejs-csso-cli/.SRCINFO
@@ -1,7 +1,7 @@
 pkgbase = nodejs-csso-cli
 	pkgdesc = Command line interface for CSSO
 	pkgver = 3.0.0
-	pkgrel = 1
+	pkgrel = 2
 	url = https://github.com/css/csso-cli
 	arch = any
 	license = MIT
diff --git a/nodejs-csso-cli/PKGBUILD b/nodejs-csso-cli/PKGBUILD
index 0b3100c..6cbe75e 100644
--- a/nodejs-csso-cli/PKGBUILD
+++ b/nodejs-csso-cli/PKGBUILD
@@ -2,7 +2,7 @@
 
 pkgname=nodejs-csso-cli
 pkgver=3.0.0
-pkgrel=1
+pkgrel=2
 pkgdesc="Command line interface for CSSO"
 arch=('any')
 url="https://github.com/css/csso-cli"
@@ -13,7 +13,13 @@ source=("https://registry.npmjs.org/csso-cli/-/csso-cli-$pkgver.tgz")
 sha256sums=('dc4a516ef7184a5b3c26daef0f90b2c0ea9e280119fcc97b4ce925e34ff21adc')
 
 package() {
-    npm install -g --user root --prefix "$pkgdir"/usr "$srcdir"/csso-cli-$pkgver.tgz
-    chmod -R go-w "$pkgdir"/usr
-    chown -R root:root "$pkgdir"/usr
+    npm install -g --prefix "$pkgdir"/usr "$srcdir"/csso-cli-$pkgver.tgz
+
+    # Non-deterministic race in npm gives 777 permissions to random directories.
+    # See https://github.com/npm/npm/issues/9359 for details.
+    chmod -R u=rwX,go=rX "$pkgdir"
+
+    # npm installs package.json owned by build user
+    # https://bugs.archlinux.org/task/63396
+    chown -R root:root "$pkgdir"
 }