> Someone has to pay that S3 (I guess CouchDB) and EC2 bills
Previous package managers have done well running on public mirrors donated by universities and businesses around the globe. rubygems finances itself via a non-profit. There is nothing necessary about NPM's business model, IMO it's just a side-effect of the incredible tolerance for private ownership within the node ecosystem. I can't imagine this model would fly for any other language/platform.