I don't feel strongly (as some do) that non-profits guarantee benevolence. There are many evil non-profits (and many more incompetent ones!) which do harm to the world, and many capital-G Good for-profit companies. In many cases, a non-profit can easily become an empty hand-wavey thing. (And in that case, what's the real difference, except $800/year to the state of California?)
Of course, it has worked out well in some cases. Mozilla and WordPress are great examples of this sort of thing functioning really well to facilitate the interaction between a company and an open source community. But it is very early to even be worrying about such things.
In any event, even if we do create a non-profit, the first step is to create a Delaware C as a for-profit company to generate the money that can allow us to create new products, spin up new infrastructure when necessary, and employ people to run the thing. So that's what I'm up to these days. npm has gotten too big to be just some dude's hobby project :)