Feature: use yarn or some other package manager that supports lockfiles

[pmarreck]

or just don't write important tooling in JS since you end up pulling in the entire ecosystem and then need an entire dev team to keep up with the security updates... which is probably what happened to this project and is in all likelihood why it looks dead