A wrapper over something like this...
git clone https://[repo]/[module].git node_modules/[module]
...and ability to provide dependency resolution along with custom runscripts?
Yes, we can. Not a rocket science. How many paranoid freaks will actually switch to it - that is the question.