Well, that would be up to the user to decide. And you don't generally install project deps that way beyond some dev-deps like linters and test runners.
Even that guidance has changed with the cultural acceptance of `npx`. At this point the only thing that should be `npm install -g` is npm itself, and that only depending on your philosophy of how current you need to keep npm versus the version that ships with your NodeJS install.