bump tap, add david, and npm urls in repo