There's a bit more to it than that. The article touches on the fact that whats on npm doesn't have to match with what's on github (which is true for any package

There's a bit more to it than that. The article touches on the fact that whats on npm doesn't have to match with what's on github (which is true for any package system that isn't 100% backed by source control).