[zhaxi] hide npm and plugin upload