Yeah, I think npm's model is the correct one for node, but it's not universally better than all others by any means. It's not possible at all in many languages,

Yeah, I think npm's model is the correct one for node, but it's not universally better than all others by any means. It's not possible at all in many languages, would result in absurd compilation times and disk space usage in compiled languages, and makes security audits much more difficult. It's certainly not very compatible with an environment where every dependency requires external approval.