> Or, even worse, are these docs, tests, and other stuff that have no place in the checkout of a recursively-resolved dependency?

Bingo. I've seen an embarassing number of what should be dev-dependencies pulled in transitively for some packages, as well.

Nothing like seeing some four layer deep dependency pulling gulp-cli because somebody didn't know what they were doing...