It was the second most reported problem on the 2025 Rust survey, after compilation times.

I think the parent was referring to hosting the entire NPM registry, not having a project that uses NPM. In that case there's substantial duplication from version to version.