After [this PR is merged](https://github.com/cfpb/hmda-frontend/pull/2440), then we have a few remaining low and moderate security vulnerabilities to resolve.