get authors and package.json over http