This yarn.lock is broken/doesn't correspond with package.json, but
having this commit makes the following commits (which diverge from
upstream) much clearer.