Shouldn't vendor code (e.g. the stuff at vendor/phantom-jasmine/) be a submodule (if you just want the code) or listed in package.json (if you want it installable via npm)?
Want to back this issue? Post a bounty on it! We accept bounties via Bountysource.