protection - npm explorer