NPM package fails in NuGet package restore due to package sources

When the nuget.org package source is missing, or when other package sources are listed and require authentication, package restore can fail.
We should specify `-Source` on the nuget install command line to ensure it works reliably.
