They also have binaries you can install without npm, however, it's extremely likely that their target audience already has npm installed, so that is indeed the easiest.

(Also, something something "easy_install pip" or "gem install bundler")