Generally Docker. We install all required node deps during our docker build to ensure that running the platform does not require npm.
NPM being down would prevent upgrading libraries or rebuilding the Docker image, but that'd only be a problem if NPM was down for a long time.