Gather open source dependencies

As a lawyer
I can know the dependencies of HIG components
so I can give attribution where it's due

---

Create a script that generates a structured list of all of our dependencies. The `license-checker` NPM package will be a big start. Try it by running it in a package directory.

```
npx license-checker --json --production > licenses.json
```

Start in a package directory by running `npx license-checker --json --production > licenses.json` and inspect the generated structured output. Done means a script generates a complete dependency list for all HIG components, suitable for attribution.

Written by the indexing model from the issue text.