* Allow job to fail as npm outdated should not block in any way
* Remove dev dependencies skip option

Add only: changes: globs for nested package.json and package-lock.json files (I think this should work?)

Hmm, this image defaults to user nobody, which can't do a few things.  Can we user root, run apt and npm i, then user nobody?

Glob any package.json / package-lock.json (sometimes these are buried in a project dir structure as parts of "sub-projects", etc.)