Npm registry is now fully HTTPS
blog.npmjs.org