The npm community forum has been discontinued.
To discuss usage of npm, visit the GitHub Support Community.
Disallow access to unpublished version's package pages.
Unpublished version’s package pages are not available on Version History list on a latest version’s package page.
But these are still available directly through their URIs.
These can contain accidentally published private data.
And these can be found by brute force.
(post withdrawn by author, will be automatically deleted in 24 hours unless flagged)