The project has been detected as a GIT repository. Sometimes a dependency on the package.json link to a GIT repository, example:
Because under the hood we use pacote to fetch and extract packages we are supporting this given pattern.