Draft: Try using yarn. Not sure if this is sane.

Would love some feedback from people on what they think about the NPM vs Yarn v3 stuff.

I use yarn at my work, and am somewhat biased towards it, but if people think it's a bad idea then we'll stick with npm.

I think the dependency scanning doesn't work with yarn 3.x, so the repo will have to move to something else.