Sure - but a ton of people are swapping over to things like Browserify, which use NPM as the package manager even on the front end.

Yes. npm should be node dependencies and bower is library/framework dependencies.