It's a misconception that NPM or Node encourage this, because they don't. There are a few package authors that are doing it that way (some even paid by download count), but that's their opinion.

Recently there is a trend towards minimal-dependency packages and I would certainly recommend auditing every package for its dependencies before using it.