For executables from npm I generally install to my home directory (i.e.

npm install <package>

from my home directory, and have

.bin/

in my path. That avoids superuser permissions