I think it's pointing to a version of the repo, so npm installs the package.json of that version of the repo.