On the unrelated topic of npm-lockdown, do we want to use `~` here, or give explicit version numbers so we don't run into any unexpected semver package version updates on each deploy?

Bonus points for anybody who wants to venture into writing bower-lockdown. *cough*