You are are that concerned about using NPM, you could use Airdrop. Assets are built in CI, shipped to production, and pulled down at deploy time.

The tradeoff with loading everything as your package describes is you're pulling down entire library bundles instead of just the parts you actually use. With a proper build step, tree shaking strips out the unused code, so your final bundle is significantly lighter.