No, thanks. This is a massive platform lock-in.

A more sane way for npm publish would be if the registry would just git checkout your repo during publish and strongly tie the package version to a commit hash.