JS libs/deps might not be located inside
node_modules folder. For example, snowpack creates it's own folder -
web_modules. NPM is optional tool, one project may not have npm as dependency at all. MVN's Closure Compiler can be used in such project as a transpiler from ES.next to ES6. In other words, Import Maps (or bare specifier) is not NPM proposal, it is ES.next proposal.