https://orbitbrain.com/blog/timing-attacks-can-be-used-to-check-for-existence-of-private-npm-packages/