What is "pirate" about this?

A lot of big companies self-host npm to avoid chain of supply attacks.