Hello, instead of modifying uscan, we could perhaps build a "proxy" like https://qa.debian.org/cgi-bin/fakeupstream.cgi which could populate `node_modules/` directory. Example of such debian/watch:
version=3 opts="dversionmangle=s/\+embed\d*$//,repacksuffix=+embed" \ https://qa.debian.org/cgi-bin/embednpmjs.cgi?upstream=npmjs/package&deps=npmjs/dependency1,npmjs/dependency2 \ .*=package-(\d.*)\.(?:tgz|tar\.(?:gz|bz2|xz)) This CGI could add node_modules/dependency1 and node_modules/dependency2 in upstream archive. Note that something may be found to verify gpg signatures if any. Cheers, Xavier
