Hoo boy, `guix import npm` was not an easy task to put on a poor #gsoc. No shade on the developer, I think people simply underestimated the challenge. I would say they got enough done to be proud of their work.
Nix has https://www.npmjs.com/package/node2nix , which is more focused on getting this thing done than doing it neatly. It does it surprisingly neatly given the circumstances. But it can't handle e.g. scuttlebutt-secure because of binary npm deps (the first one it croaks on is leveldown, which tries to get leveldb using prebuild-install).