John-David Dalton's review of npm