The caret (^) meaning on below 0 version:

^0.2.3 := >=0.2.3 <0.3.0

If you already have a package-lock.json file, then just running npm install won't update the package if a new one is available.

To check the actual version installed run

npm list --depth=0