List dependencies used in README

[prendradjaja]

• ideally including transitive(?) dependencies (i.e. deps of deps, and so on)
• also, include new dependencies in changelog (do we have a changelog?)

Important bc security (and I'm not speaking academically here, I do try to [at least briefly, even if it's just googling the name or w/e] make sure I don't run any code that seems sketch on any machine I use. esp important bc npm is so damn vulnerable)

[prendradjaja]

@marwahaha I can do this, but do you want to?

[marwahaha]

I don't think we need this:

• https://docs.npmjs.com/files/package-lock.json
• https://blog.github.com/2017-11-16-introducing-security-alerts-on-github/

[prendradjaja]

billions of blistering blue barnacles, we have a lot of dependencies.

[marwahaha]

Most of them come from eslint (a dev-dependency!)

 npm ls