complete command unpublish.js
add deps on sha
add test cases and fixtures of command publish and command unpublish