Vulnerabilities with npm build on BigSur

[k-eduardo]

Hi, this is a beautiful project! :=)

I was building this project and found 108 vulnerabilities, with 5 labeled as severe. I was wondering if something has been done within Chart JS to prevent these from being exploited.

Regards!

[etimberg]

Is this from npm audit?

[k-eduardo]

Yes, that's correct.

[etimberg]

I've upgraded dependencies in #9102. Not all of these issues are fixable. The trim dependency is likely difficult to fix according to eslint/eslint-plugin-markdown#186

All of these dependencies come for the build chain, not for the actual library.

[k-eduardo]

Thanks! Yes, I will be trying to reduce the risk. If a good idea comes up, I'll let you know in a PR. Have a good one!