+1 note: `npm publish --force` is forbidden