You should save your deps in your SCM! Microsoft is giving away ownership to existing packages if you tell them you will use it for a TypeScript project.
What? Does Microsoft control npm?
Yes. npm is a subsidiary of GitHub, a subsidiary of Microsoft