Now and than there are dependabot PRs, but since there is no CI, merging feels like Russian roulette.
I don't want to check out a dependabot branch first and test this locally. Please add some tests to see if the webserver boots and can serve the home page or something like that.