[glaucon]

The article is a little difficult to read so perhaps I missed this.

Surely a key determinant in making your project closed source is your willingness to cut yourself off from dependencies with strong copyleft licences? And, correct me if I'm wrong, this is true at whatever depth of dependency the copyleft licensed dependency is found, which in some environments ("hello npm registry") is going to exclude an awful lot of code.