docs: link to npmjs.org in readme

closes #1068