diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..8abca40
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,11 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://help.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+
+version: 2
+updates:
+  - package-ecosystem: "npm" # See documentation for possible values
+    directory: "/" # Location of package manifests
+    schedule:
+      interval: "daily"
diff --git a/README.md b/README.md
index d40071e..642ea6f 100644
--- a/README.md
+++ b/README.md
@@ -6,7 +6,7 @@ This project was created to modernize the SCORM JavaScript runtime, and to provi
 ### What is this not and what doesn't it do?
 1. This is not an LMS
 1. This does not handle the uploading and verification of SCORM/AICC modules
-1. This project does not **currently** support the TinCan/xAPI runtime, but is it something I am considering in the very near future.
+1. This project does not **currently** support TinCan/xAPI/CMI5, and I'm not sure if I will ever get around to it. However, I would welcome merge requests to add support for any additional specifications.
 1. This library does not setup communication between an external AICC module and an LMS.
 1. This project is not complete! I'm still working on AICC testing, and continuing to write proper test cases for all APIs
 
diff --git a/package-lock.json b/package-lock.json
index e78b185..9a77eb7 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -4240,12 +4240,6 @@
           "dev": true,
           "optional": true
         },
-        "ini": {
-          "version": "1.3.5",
-          "bundled": true,
-          "dev": true,
-          "optional": true
-        },
         "is-fullwidth-code-point": {
           "version": "1.0.0",
           "bundled": true,