New and Promising Runtime for JavaScript/TypeScript
blog.goyello.com
blog.goyello.com
If you are really pedantic, you should probably also check in node_modules with every release you care about.
Having said that, having a system that can source modules from a URL and then enforce hashing and versioning could be a win. I'd just hate to see a repeat of the early golang build system that led to the rise of gb.