Does it protect against the hosting site going down and the project disappearing from the web? That's the main concern people have when they check library dependencies into source control.
Nope, but hosting an NPM mirror does do that, or mirroring the packages that you use in your projects if you want to skip the full mirror. So you can combine that + shrinkwrapping to get the same benefits.
