respond.js, pin dependencies, and add aria roles

These have all been sitting at the back of my to-do list for a while.