Project dependencies are not updated

[nostneji]

It's unfortunate that the dependencies of this project have not been updated - sbt 1.2.8 vs 1.8.2 etc.
Users could of course do this themselves, but it's not as simple as just changing the sbt version number and things will continue to work. For example, sbt 1.7.2 is the latest version that can be loaded without errors (after fixes to the build.sbt syntax), but it won't compile due to internal errors in twirl.
Using sbt 1.2.8 is problematic due to its dependency on a vulnerable version of log4j.