Per [vulnerability](https://blog.npmjs.org/post/174411769410/how-npm-is-affected-by-the-recently-disclosed-git)