osmtogeojson use an old xmldom version

[greenscientist]

We have this critical dependabot issue.
https://github.com/chairemobilite/transition/security/dependabot/55

We can try to ask the maintainer of osmtogeojson to update its dependancy or convert our code to use something else. (Maybe convertir it to rust)

[greenscientist]

There is already a PR uptream: tyrasd/osmtogeojson#146

[tahini]

Considering replacing with https://www.npmjs.com/package/osm2geojson-lite, which is smaller, more recently updated, without third party dependencies and, apparently, produces quite similar output (with an additional bounds property), but on a large polygon, it produces a few features less. Still have to figure out why and if it matters and or one of the options can fix this.

[greenscientist]

Good find. One thing for more of a future work: we could get rid of this package and just load the necessary data directly into our database and fetch it from there instead of passing geojson around.