You can clone with
HTTPS or Subversion.
However, they'd be required for:
Oh, sweet. #942 is a duplicate of this.
yup, sorry re #942 - should have done a search first.
Although it was recently referenced, this issue is 2 years old. Should it be abandoned or should more efforts be spent on it?
Fixed by npm/read-package-json@f89cd17.