getPackageConfig also uses package.json registry endpoint