There is a `yarn.lock` file checked into the repository, but CMake build file is using straight `npm` to build the console.
This means that the content of `yarn.lock` is used during Console development (if yarn is used to build and test the console) and it is ignored when CMake is building Dispatch Console for deployment.
There is a package locking mechanism in npm since npm version 5. It is `package-lock.json`. We should decide if we want to use yarn or npm, and use the corresponding command in CMake, and use the correct lock file.
The decision should take into account users of Dispatch, who may not have access to npm 5, possibly. I am not sure if this is relevant consideration.