release-1.9
use npm to download extension dependencies after installing from registry (#10602)
split out package validation so that it can be used on server.