Download a tarball associated to an npm package