A JS hook's npm packages and modules are what the JavaScript compiler fetches and writes to disk, so a hook is refused unless each package is one MishkaCmsCore.Runtime.Compilers.NpmPackages can fetch, and each module a plain name.js with its content — written beside the hook, and nowhere else.