current version uses out-of-date @zxing/library (for QR code display)
and this version was pulling an unmaintained text-encoding dependency

they seem to have forked text-encoding into @zxing/text-encoding and are
maintaining it themselves

npm install --package-lock-only && npm ci
npm start

opened a fresh wallet, and sent BCHA and tokens to it by scanning the
displayed QR codes with my phone which runs the production version of
cashtab