Scheduled dependency updates

Problem Description

To minimize security vulnerabilities, enabling Dependabot, Renovate or another alternative for scheduled dependency updates would be useful.

Since the package-lock.json file is not published, there's no way to verify dependencies have the upgraded.

Potential Solution

Enable Dependabot, Renovate or another alternative for scheduled dependency updates to enhance security and outdated dependencies.

Snyk is another option that can be considered as a developer security platform to help identify vulnerabilities in dependencies.