Backport #38826 by @silverwind
The npm packument left `time`, `keywords` and `maintainers` empty
although the data was available. `created` and `modified` are derived
from the versions currently served, as there is no package-level
timestamp to read them from.
Co-authored-by: silverwind <me@silverwind.io>