Not critical, especially right now, but author can be an object or a string (see `parsePersonString` in package-validator.js). If only there was a way to share Node-style modules with the client side ;)