And when will we get rid of the vendored node_modules, and make it read only?