You can just build a RPM package with your dependencies and another with the dist result. We have something like that, node_modules for some project goes to a

You can just build a RPM package with your dependencies and another with the dist result. We have something like that, node_modules for some project goes to a rpm called $project_name-devel and the result goes to $project_name Is not really that complicated and then we don't rely on anything outside of our control (e.g: github, npm) We never had an issue with this workflow. Our dependencies (the devel package) changes maybe once every two months if so?