Generally, NPM packages are transpiled/minified with webpack (or w/e newer tool) and published as minified bundles. That's why it's done that way. It avoids com

Generally, NPM packages are transpiled/minified with webpack (or w/e newer tool) and published as minified bundles. That's why it's done that way. It avoids committing the webpack compiled dist to the repo. With PHP, since there's no compile/minify step, there's no need for "build artifacts", so you can grab the code directly and run it as-is. But obviously this has big supply-chain security downsides.