crawl the npm registry for package updates