pkgjs-lock.json varies between the builds, varying between "node_modules/foo" and "/usr/share/nodejs/foo"
Our notes about issues affecting packages are stored in notes.git and are targeted at packages in Debian in 'unstable/amd64' (unless they say otherwise).