The project has been detected as a GIT repository. Sometimes a dependency on the package.json link to a GIT repository, example:
{
"dependencies": {
"zen-observable": "^0.8.15",
"nanoid": "github:ai/nanoid",
"js-x-ray": "git://github.com/NodeSecure/js-x-ray.git",
"nanodelay": "git+ssh://git@github.com:ai/nanodelay.git",
"nanoevents": "git+https://github.com/ai/nanoevents.git"
}
}
Because under the hood we use pacote to fetch and extract packages we are supporting this given pattern.