Mainly (but not limited to!):

1. Ditch node_modules as state input and instead rely on repository manifests
2. Fix github sourced package issue
3. support new yarn integrity field
4. ability to run in browser