That's very interesting, thanks @cel! I feared of running into issue with the git-ssb deps.
Insert the URL-encoded message id after the registry base URL.
the message id is the key of the npm publish for that package (in your example case patchfoo), right?
@clacke: I saw that you posted on gnusocial that you got patchfoo running. Very nice to hear as well!