it doesn't actually use npm underneath, it just links to things, and looks things up in the registry