=== npm audit security report ===                        
                                                                                
                                                                                
                                 Manual Review                                  
             Some vulnerabilities require your attention to resolve             
                                                                                
          Visit https://go.npm.me/audit-guide for additional guidance           
                                                                                
                                                                                
  Critical        Prototype Pollution in minimist                               
                                                                                
  Package         minimist                                                      
                                                                                
  Patched in      >=1.2.6                                                       
                                                                                
  Dependency of   tap [dev]                                                     
                                                                                
  Path            tap > @isaacs/import-jsx > @babel/core > json5 > minimist     
                                                                                
  More info       https://github.com/advisories/GHSA-xvch-5gv4-984h             
                                                                                
                                                                                
  Critical        Prototype Pollution in minimist                               
                                                                                
  Package         minimist                                                      
                                                                                
  Patched in      >=1.2.6                                                       
                                                                                
  Dependency of   tap [dev]                                                     
                                                                                
  Path            tap > treport > @isaacs/import-jsx > @babel/core > json5 >    
                  minimist                                                      
                                                                                
  More info       https://github.com/advisories/GHSA-xvch-5gv4-984h             
                                                                                
                                                                                
  High            Prototype Pollution in async                                  
                                                                                
  Package         async                                                         
                                                                                
  Patched in      >=2.6.4                                                       
                                                                                
  Dependency of   ut-tools [dev]                                                
                                                                                
  Path            ut-tools > fs-plus > async                                    
                                                                                
  More info       https://github.com/advisories/GHSA-fwr7-v2mv-hh25             
                                                                                
                                                                                
  High            Prototype Pollution in async                                  
                                                                                
  Package         async                                                         
                                                                                
  Patched in      >=2.6.4                                                       
                                                                                
  Dependency of   ut-tools [dev]                                                
                                                                                
  Path            ut-tools > eslint-plugin-require-path-exists > fs-plus >      
                  async                                                         
                                                                                
  More info       https://github.com/advisories/GHSA-fwr7-v2mv-hh25             
                                                                                
found 4 vulnerabilities (2 high, 2 critical) in 986 scanned packages
  4 vulnerabilities require manual review. See the full report for details.