This should make it more difficult for people who are publishing malicious packages to npm to get them on the CDN.