This is necessary because we are getting a lot of dependabot alerts for libraries we are currently not using