Do a dependency review

[angusmcleod]

Conduct a dependency review to ensure we're using the right, and most secure versions, of all dependencies.

[tpltnt]

Maybe configuring dependabot solves this issue? This can be done for the organisation.

[angusmcleod]

@tpltnt Yes, we will configure dependabot 👍 We'll also need someone to check on whether we're using dependencies that are being actively maintained as well, or if we have any ticking bombs there. @auggod might have some thoughts on some potential depedencies to focus on.

@tpltnt Thanks also for your PRs! Most appreciated. I have it in my calendar to review them all this coming Monday.