npm: new packages must have all lowercase names