I've realized we're putting a lot of type annotations into this package but haven't been testing them.

We should add a new dependency group types or typecheck or similar, and at least use mypy. Then we should add a new tox job that runs mypy on src and tests. We may need to exclude the test data directory, since any code found in submodules should not be considered. setup.py should also be excluded.