.nvmrc specifies a single nodejs version which the project is expected to run on. It's used automatically in our build pipeline, and contributors can opt-in to use it as well by installing nvm (but it's not required to run the project)
The build workflow just ensures that both npm run lint and npm run build work without issues
CODEOWNERS can be used to manage who is responsible for approving PRs
Dependabot will start creating PRs weekly to update npm dependencies - this is useful to ensure we get latest security fixes from dependencies
npm run lintandnpm run buildwork without issues