Feature Request: Enable dependabot to ensure node packages don't include known vulnerabilities

[zakkak]

The extension seems to depend on libraries with known vulnerabilities.

Please consider enabling dependabot on the repository to get notified about such cases.

More info in https://docs.github.com/en/code-security/tutorials/secure-your-dependencies/dependabot-quickstart-guide