Is it correct to use the npm package manager in a MODX CMS project?

Question

MODX

Hello, please tell me, I'm doing some tasks on a site that was made on CMS MODX.
I think to use npminstalled laravel-mixto collect css, js.
But since it's a modx, index.php is in the root of the site, and the node_modules folder is also in the root. Accordingly, there is access to the node_modules folder from the browser.
I think I can disable access to node_modules via .htaccess, but is this a good practice?
If, for example, in the future there will be some kind of package from node_modules that will pull some kind of picture from its folder, then because of this entry in .htaccess there will be a problem right?

Thank you in advance for your response.

Answer 1

What prevents you from starting the assembly not from the root?