With the recent security changes: https://blog.npmjs.org/post/189618601100/binary-planting-with-the-npm-cli It causes a warning > warning sha.js@2.4.11: Invalid bin entry for "sha.js" (in "sha.js").