We could `GET http://registry.npmjs.org/mojito` and parse the @latest from there, but it's not clear if there's a benefit. We might want a lower minimum too. I would like to see this command get smarter in a few ways.