diff --git a/scripts/review-levels.py b/scripts/review-levels.py
index 5c129d1..ef2a0b8 100755
--- a/scripts/review-levels.py
+++ b/scripts/review-levels.py
@@ -21,7 +21,10 @@ the diff: index.js routing and auth, side effects of the shipped modules
 (disk writes, the temp-file sweep, body caps, shell commands, outbound calls,
 require.main), guard tests (an existing line changed or removed),
 package.json (anything but a version), package-lock.json (a package added or
-removed, an origin changed), .gitignore (a line removed).
+removed, an origin changed), .gitignore (a line removed). package.json
+knows the block of a package line only when the block's opening line is in
+the hunk: a bump deep inside a large "dependencies" block reads as normal,
+where the table says high (impossible today, the runtime has none).
 """
 import itertools
 import json