Outside dependencies in npm projects

This question is similar to this one:

Package-lock.json git dependencies with buildNpmPackage