This always struck me as a rather silly idea, to be honest.

Now we've come full circle. I have a vendor who is insisting that I use node.js and pull their code from their NPM repository from the same... For frontend code. Just, have the entire contents of your (their) node_modules folder exposed to the public internet at all times. Isn't this just Javascript with extra steps?