Package vulnerabilities

[shansitads]

• Check npm package vulnerabilities and warnings for any concerning security issues marked by dependabot
• Resolve issues by changing versions/replacing the packages

[rgbayrak]

@shansitads @dgzct11 any update on this?

[shansitads]

I was able to get the npm vulnerabilities down to 13 with npm audit fix and down to 8 with npm update, still looking into the remaining ones

[dgzct11]

It seems that react-scripts is the cause of all the vulnerabilities. I found this github issue that explains how these aren't 'true' vulnerabilities (facebook/create-react-app#11174), and after moving react-scripts to the devDependencies and running npm auit --omit=dev it says 0 vulnerabilities.