Turn a production React build back into a project

Drop a site's build output: the .js bundles, plus CSS, images and index.html if you have them. You get a source tree with JSX, imports and readable names, a working offline copy of the site, and a security read-out.