• @exodus/js-xdr@1.0.3 matches upstream a2f09f417, which is js-xdr@1.0.3 + Buffer fix + removed babel-runtime dependency
• @exodus/js-xdr@1.3.0 matches upstream js-xdr@1.3.0, but only packages lib/ and cleanups package.json

We do pack only lib/, unlike upstream, so we still need the fork.