WIP: update url for fetching tar from npm-bundle-deps