Comment 8 for bug 1775466

Thanks, Galen! I'll create bugs for the first two items.

I'm not yet sure how best to leverage package-lock.json and/or whether we really want to keep it in the repo. Will revisit.

Reviewing latest branch in prep for final merge.