diff --git a/nodejs-csso/.SRCINFO b/nodejs-csso/.SRCINFO
index f1be648..f01b04b 100644
--- a/nodejs-csso/.SRCINFO
+++ b/nodejs-csso/.SRCINFO
@@ -1,7 +1,7 @@
 pkgbase = nodejs-csso
 	pkgdesc = CSS minifier with structural optimisations
 	pkgver = 5.0.0
-	pkgrel = 2
+	pkgrel = 3
 	url = https://github.com/css/csso
 	arch = any
 	license = MIT
diff --git a/nodejs-csso/PKGBUILD b/nodejs-csso/PKGBUILD
index 4cab15b..1a8315e 100644
--- a/nodejs-csso/PKGBUILD
+++ b/nodejs-csso/PKGBUILD
@@ -3,7 +3,7 @@
 pkgname=nodejs-csso
 _npmname=csso
 pkgver=5.0.0
-pkgrel=2
+pkgrel=3
 pkgdesc="CSS minifier with structural optimisations"
 arch=('any')
 url="https://github.com/css/csso"
@@ -14,11 +14,7 @@ source=("https://registry.npmjs.org/$_npmname/-/$_npmname-$pkgver.tgz")
 sha256sums=('5786f51f021300198086494a2a04aa4baf6126f0d39d3a749c28f293655fb893')
 
 package() {
-  npm install -g --prefix "$pkgdir"/usr "$srcdir"/$_npmname-$pkgver.tgz
-
-  # Non-deterministic race in npm gives 777 permissions to random directories.
-  # See https://github.com/npm/npm/issues/9359 for details.
-  chmod -R u=rwX,go=rX "$pkgdir"
+  npm install -g --prefix "$pkgdir"/usr --cache "${srcdir}/npm-cache" "$srcdir"/$_npmname-$pkgver.tgz
 
   # npm installs package.json owned by build user
   # https://bugs.archlinux.org/task/63396