As others have pointed out, make sure to mark files that are not supposed to be exposed to the client by prefixing them with a underscore, otherwise you'll have a bit of a security issue. Otherwise, you're good to go.

Ace! but in terms of running it, how would Heroku know how to, ie. if there's no `package.json`, there'll be no `npm run start` defined?

This should help: https://github.com/remoteinterview/zero#running-on-cloud

Oh, never spotted this: https://github.com/remoteinterview/zero#running-on-cloud

Oops.

Couldn't see it on the main docs site (https://zeroserver.io/)