An arguably decent compromise between adding node/npm to your build process, and vendoring your static assets.
Or more concretely, a python-based client and lockfile format for NPM.
Asset Vendor requires Python 3.6 and later. To install, use pip or your preferred package manager:
$ pip install AssetVendor
- all of the work.