sounds too much like it might do too much third party stuff,

I lost trust in npm altogether a while ago because of there being too many third party depedencies and too much complexity in everything.