Counterpoint for this. How may of the packages in your node_modules folder have you contributed even an issue to, never mind a patch? Do you even know what packages are in there?

Does that not make you or your company a thief?

If your argument is you don't use JS/node then answer the same question about your languages package manager / standard library / compiler etc.