Cherrie Chang

End goal: dev can build an experiment, open inspect and type a standardized jsPsych command that generates a citation list (bibliography?) of plugins and extensions used. Bibliography style list of...

No citation tool is actually added to contrib. As long as a package in contrib's jspsych dependency is up to date it will have access to getCitations(), so I think...

closing this to just merge to main

> When we do this maybe we make a table for extensions and another table for plugins? sounds good!

- [x] [GHSA-3xgq-45jj-v275](https://osv.dev/vulnerability/GHSA-3xgq-45jj-v275): Need to update [cross-spawn](https://www.npmjs.com/package/cross-spawn) dependency to v7.0.5; requires adding/overriding in `package.json` since this is a peer dependency; `package-lock.json` showing it is v7.0.3 right now. - [x] [GHSA-952p-6rrq-rcjv](https://osv.dev/vulnerability/GHSA-952p-6rrq-rcjv):...

@jodeleeuw Maybe we should figure out how to systematically test whether each fix introduces breaking changes?

webgazer plugin [virtual chinrest](https://www.nature.com/articles/s41598-019-57204-1) [surveyjs](https://surveyjs.io/) [cff format fields guide](https://github.com/citation-file-format/citation-file-format/blob/main/schema-guide.md) mouse tracking

Figure out what to do with plugins/extensions built no in affiliation with jsPsych but no paper attached -- zenodo for all?

> Would it make sense to add a parameter to survey-text that turns the feature on/off? yeahh let's do that

> This is a good idea -- it seems like extensions should automatically add their version info to the data file on trials where they are active. Like plugins do....