Specify a path within an npm package: download and extract it, returning a local path for reading