For restricted environments limited to things you can get from standard repos this is the only way to get NPM deps.