You always have the option of running a local npm cache/registry. We do for npm and artifactory. Not exactly the same as vendoring dependencies, but it's a de

You always have the option of running a local npm cache/registry. We do for npm and artifactory. Not exactly the same as vendoring dependencies, but it's a decent compromise in some situations.