My best guess is that the code was used in non-node environments.

It wasn’t and isn’t uncommon to pull down a dependency from npm and expect it to work in multiple runtimes.