Related to this: New package "rocket:module" to provide CJS/AMD/ES6 Modules for Meteor packages with shared NPM dependencies
Packages should be able to have their own npm dependencies, but IMHO, they should also be able to share npm dependencies. The distinction for this can be absolute vs range versions. Npm.depends allows only absolute.