Npmjs.com has Cloudflare captcha on their suggestion API

Yes, this means their search box is broken. If you see no suggestions when searching, you must click the button to load a new page with search results, which also has a captcha, but it is a html page so you can click it. After that, the suggestions api will stop returning html and start returning json for suggestions.