# Package Management NPM Package dependencies can be found in the usual `./package.json` file. There is also `./yarn.lock` which fixes referenced dependency's versions. Changes to these files should be kept to a minimum to avoid regression for seldom used features (caused by newer dependencies changing and breaking them). Changes to `./yarn.lock` should be reviewed carefully, specifically to ensure no rogue dependency url is introduced.