No it doesn't, but instead it has normalized using a ton of third party packages even for as silly as left-pad [1] that might take your whole application down, put the security of your users in jeopardy or even take bulk of JS built websites down [1]. Even if the left pad incident is excluded, everyday, JS developers rely on unaudited third party libraries from the shitstorm that NPM is. So, you just offset the library problem, not really solved it.