Npm registry sets stage for more secure package publishing

All the world's a stage, and all the packages are merely players