Dependabot alerts require a joint review and perhaps some updates to close some

[pacharanero]

Dependabot flags up know vulnerabilities and issues with dependencies, as listed in package.json

There are a few flags here
https://github.com/rcpch/digital-growth-charts-react-client/security/dependabot

We could do with setting aside some time to go through and see if we can fix them, perhaps a pairing session?

[dc2007git]

This seems really interesting. Bumping this so we can have a discussion about it as I know @eatyourpeas is keen to resolve dependency vulnerabilities in dGC.