Reinstall everything from a clean node_modules and package-lock.json
state.
Re-generate list of bundleDependencies and node_modules/.gitignore with
a script that does the right thing based on actual dependency state.
Don't need to use MD5 (which interferes with using npm with a
FIPS-compliant Node.js binary), and murmur is faster anyway.
Fixes: #10629
Credit: @othiym23