> depends on the definition of non-standard I guess. Depends on the definition of 'software' also. Strictly speaking, every npm package is someone else's code

> depends on the definition of non-standard I guess. Depends on the definition of 'software' also. Strictly speaking, every npm package is someone else's code running on your machine. Often with quite wide ranging permissions. If you need approval from IT to add a package or increment a version then your development process is going to be slow for sure.