npm registry bug