dependabot wants ssri >8.01

[sspickle]

See alert here

Unfortunately this requires updating webpack, but webpack@4.42.1 requires ssri@^6.0.1 via a transitive dependency on cacache@12.0.4. Hmph. I'll check into what version of webpack we'd need to get a later version of ssri.