And I'm happy not to have to prove anything to a thirsty rando who assumes we need to repeat some common knowledge best practices in our nascent work-in-progress document (which, btw, we didn't post anywhere for feedback but is simply open source and was randomly shared).
We're a JavaScript consultancy. Clients specifically want us to help them with their tooling, and we need to reference this stuff a lot, that's why we happened to write the webpack stuff down first. This is not a blog post series and there is no implied significance to the ordering so we didn't really "lead off" with one thing or the other.
Anyway, good luck with your prescriptivism and billing your clients for adding "another authentication mechanism […] for non-browser access" (AUTH) – they will love that.