New issues for Andy to elaborate on

[andymeneely]

• We need an automated testing strategy. jsdom? react testing library? See deps notes
• SemanticUI - are we trimming down to what we need? Or are we including the whole thing?
• DOMpurify - we're not using it enough! let's find opportunities to use it every time we use dangerously-set-html
• server/package.json needs to be examined
• Add an explainer to the readme for all three package.json's (/, server/, ui/)
• Take a look at all of our dependencies and see if there are MAJOR (e.g. 1.0 -> 2.0) updates. Look into them, make new issues/PRs as needed.
• We need some GitHub workflows to create a "review dependencies" chore. So we can just make a new chore task with a checklist and assign it to someone. That way we can do this once a semester-ish.
• caniuse-lite - we're not using this, but we probably should be! look into the best way to be using this library in the future
• web-vitals - are we under-utilizing this? it's in ui/src/index.js but that was auto-generated. Look into: https://bit.ly/CRA-vitals

Also: let's consider removing the following dependencies:

• ajv
• momentjs - we'll need to port the momentjs calls to dayjs
• either use he or html-entities - decide which one and port