When you install nodejs, you have npm installed. So in this case, there's not much you can do though. So it's not just npm issue, it's NodeJS issue, too.
Not necessarily. On Arch, npm isn't bundled with the node package.
Also, according to the official npm documentation, npm should be installed through nvm, thus having the ability to specify its version separately from node.
