`dev` branch: after ~~#4~~ #9 is merged, need to review (and clean-up) both client and server dependencies, then regenerate `package-lock.json`.