Submodules. We had left-pad type incident where the package we depended on disappeared from npm, and didn't even realize it till the next time we setup from Gi

Submodules. We had left-pad type incident where the package we depended on disappeared from npm, and didn't even realize it till the next time we setup from Git. Since then, we have node_modules as a submodule tracking latest-commit, and it works.