This has been fixed. It says Apache 2.0 both places now.
Good point! It will be be made available via npmjs shortly.