npm package permissions — an idea

A few days ago I opened the calculator on my new phone and got a message: “Calculator would like to access your contacts”.At first I thought this was a bit sad (clearly the calculator was lonely) but it got me thinking...What if, just like apps on our phones, npm packages had to declare what permissions they required?.