I ported a project today from npm+bower to entirely npm. It works really well! Bower fetches from VCS, but npm has 'proper' file uploads.
miniblog.
Related Posts
TIL: Bower is no longer maintained: https://github.com/reactjs/redux/issues/944#issuecomment-154858804 (I'm happily using npm+webpack these days anyway)
"You can use Bower to simply pull a repo into your project without having to clone, even if it doesn't have a bower.json file." Nifty.
I'm favouring bower over CDNs these days. No risk of XSS.