[TeMPOraL]

> The packages won't change on npm and you'll always get the same version for all sub-dependencies.

Until they decide to stop hosting old versions you need, because reasons.

[gamanoid]

Aren't there several sites that cache npm packages or redistribute over CDNs?

Though I agree, over reliance on just npm can be a bad thing (the 2016 issue over kik)