Won't this make leftpad-type scenarios even _more_ likely? What is the benefit?
The main benefit I can see is that you can include code from your own "registry" very easily in unmanaged scripts. You can already do that because you can add a dependency to package.json using an https link already, but with this new feature you can include those dependencies in node scripts you aren't managing with a package file.
You can do that. I'm not suggesting you should. I won't.