Explore CodeQL or other static code analysis tools

[jawnsy]

We currently use eslint in our build process, but we might want to explore other tools, such as CodeQL, to catch problematic constructs in our code.