Unmodified upstream source archives are listed with their exact published npm
versions, repository revisions, URLs, and SHA-256 hashes in
../UPSTREAM-SOURCES.json. See ../README.md for scope and build instructions.
