Timeouts, TLS resets, or occasional 502 against registry.npmjs.org: separate DNS/TLS/timeout/401 first, then verify the team GROUP and PROXY cache hits; a unified registry does not replace npmjs global identity, and cold misses still depend on upstream.