since packages often depend on prior versions of themselves to build and the package authors are frequently not even aware of this

How can that possibly happen?

many of the npm packages aren't actually built directly in a clear way from their source

whaaa?

(I obviously know nothing about npm)