Stats in general seem like a pretty horrible monetization strategy considering the other obvious routes that would not be met with service-killing scorn. I would be shocked if the first option was not the route they take, with the second possibly coming later.
- paid private repositories on npm or a parallel system (think github)
- paid internal npm servers with support (think github enterprise)
- statistics that used to be available, like download counts (think imgur pro)