allow slashes in package names

References npm/npm#6333