Most of the code is written, the logic just needs to reflect this. https://github.com/lunasec-io/lunasec/blob/master/lunatrace/bsl/ingest-worker/pkg/metadata/registry/npm.go#L80 The NPM registry should be used when there are errors when accessing the package from the database.