Just accusing consultants it too simple. This mindset is prevalent in whole software culture. Think leftpad.
Introducing a dependency on an NPM module for so little returned value is a lot different from a physicist or mathematician relying on a peer reviewed result from another academic.