This switches to using npm to manage xhook, which is about as good as
vendoring now that we have lockfiles.
This also updates some misc stuff in the lockfile, but notably updates
xhook several versions forward from v1.3.5 to v1.4.9, which includes several fixes.
This switches to using npm to manage xhook, which is about as good as vendoring now that we have lockfiles.
This also updates some misc stuff in the lockfile, but notably updates xhook several versions forward from v1.3.5 to v1.4.9, which includes several fixes.