Doesn't JavaScript world know anything like Java Maven proxy servers? Which retrieve artifacts on first lookup and cache them forever?
Personally I do not understand why Java libraries which are binary blobs are not targeted more often.
Java libraries are JAR -> Java Archives. You can unzip them and there is JVM bytecode inside which can be decompiled. Not really binary blobs.
The ones who do are focused on caching private npm servers like verdaccio.