We have npm as our single source of truth, although you could host your own npm, or use a tool like sinopia [0] which makes pretty reasonable tradeoffs while being usable. Instead of asking you to replicate all of npm, it just keeps local copies of your packages, and if a package isn&#x27;t found it&#x27;ll hit npm.<p>[0] <a href="https:&#x2F;&#x2F;github.com&#x2F;rlidwka&#x2F;sinopia" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;rlidwka&#x2F;sinopia</a>