Update npmjs.com URL to be http://

.. because https://www.npmjs.com has an invalid security certificate (belongs to squarespace.com).