From:
https://github.com/npm/arborist/blob/d9c603ede4fefb0bda1385e70b431b3adec810bf/lib/shrinkwrap.js#L704
Now npm will resolve any github url to git+ssh.
But this will make flathub bot stuck at downloading:
flathub/com.getmailspring.Mailspring#2 (comment)
flathub/net.cozic.joplin_desktop#18 (comment)
As flathub/flathub#2466 (comment), using "ssh" URL like that is bound to fail on flathub: there is no ssh key setup.
So, could we add a option to replace the url, or add some warn messages?