differing .npmrc placed into a bnd at install time is likely to cause fingerprint mismatch problems.

[davidkel]

But different orgs may need to have different .npmrc files so we need a vehicle outside of bundling it into the package to support this in the fabric sdk, or..... we allow prevendoring, but then native modules will be a problem unless we can force a native rebuild.