Most of the code is written, the logic just needs to reflect this.
https://github.com/lunasec-io/lunasec/blob/master/lunatrace/bsl/ingest-worker/pkg/metadata/registry/npm.go#L80
The NPM registry should be used when there are errors when accessing the package from the database.