but not require there to be node_remote_module deps at all (they can be only in package.json)… but if you declare them, you get a warning if they fall out of sync, letting you implicitly communicate that the org is moving to a new version without requiring it