There appears to be a significant discrepancy between the cacheability of tarballs from @-prefixed packages and other packages:
> GET /invert-kv/-/invert-kv-1.0.0.tgz HTTP/1.1 < Cache-Control: max-age=432000
> GET /@webassemblyjs/helper-code-frame/-/helper-code-frame-1.8.5.tgz HTTP/1.1 < Cache-Control: public, max-age=300
The latter would seem to be rather low. Is this intentional, or simply a mis-written match in a webserver somewhere? Thanks for checking!