the whole point is the original author may not want to publish the forks on his domain. There ought to be independent 3rd party to keep track of the fork or a npm name that is not the author and not github (aka Microsoft).