docs: give a hand-driven PR a stopping point, and name the stacked-PR blind spot - #660

Click through to the see the full socket security project report page for this commit to see information about every dependency in this project.