NPM: Throw error if unsupported dependency expression

[dareid]

NPM supports:

• tarball URLs
• git URLs
• github owner/repo identifiers
• local file paths

We could maybe support git and github in future, but as of now, it is not supported. Throw a suitable error message.