I may be wrong, but I think every place this is used there is a check like: https://github.com/hayes/unpm/blob/master/lib/controllers/packages/get_package.js#L30-L36