The plugin code running in the browser currently requires (at top level)

• msal-browser (https://azuread.github.io/microsoft-authentication-library-for-js/ref/modules/_azure_msal_browser.html): MS official library to handle acquisition of the API access token(s)
• vue - essentially for showing / hiding UI elements, dynamically & for i18n
• vite - for "building" minimized single file JS-code

It may be quite possible to get rid of vue and its dependencies, to reduce the amount of library code we need to trust. Review whether that is worth while.