Just a quick heads up. NPM is going to invalidate a lot of tokens soon. They're advising that people go and revoke their tokens in advance and put new ones in place. They said they have a way to invalidate older tokens without touching newly created ones.