good boy, claude! (advising me in July to commit package-lock which had previously not been in the repo -> now when malicious packages of popular dependencies got pushed through npm, we know we were not running those versions, whew!)

ALT