Can anyone explain the issue here and what the potential implications are? As far as I can tell the npm client code isn't under a problematic license and you don't agree to any terms of service unless you use the service.