Hacker News Reader

They could do it similar to Go. Instead of "facebook/react" it could be "facebook.com/react" in "package.json".

Well yes, but my point here is that NPM's entire design is around not doing that - whereas Go's design isn't