>Gotta admit, I'd like to see a more decentralized approach become popular here. There's no specific reason packages always have to be hosted in one or two central registries.
That is what ESM is. Each https link are basically decentralised registries.