We need a npm loader that will fetch package tarballs from the npm registry and load them into the archive.

The loader must also be capable of extracting upstream metadata that are specific to npm (aka. the parsing of package.json files).