npm-sourced plugins now accept --registry and --version options, allowing installation from private registries or pinning to specific versions.
Evidence
Plugin install function now passes { registry: A.registry, version: A.version } (search for "--registry")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.