> I guess we need an in-browser package management like npm?

It exists and it's called bower.