For #3 wouldn’t npm install’s shrinkwrap be a resolution to this issue?
Gavyn Elrick
11
Shrinkwrap is pretty good, but it doesn’t solve the problem of a version or a module being unpublished from npm and it doesn’t help with bower dependencies. In my view a CDN is safer.