Address 169 Security Vulnerabilities

[cschroedl-gov]

A recent npm audit found 169 vulnerabilities (22 low, 54 moderate, 72 high, 21 critical)

$ git clone [email protected]:sapessi/serverless-sam.git
Cloning into 'serverless-sam'...
remote: Enumerating objects: 179, done.
remote: Total 179 (delta 0), reused 0 (delta 0), pack-reused 179
Receiving objects: 100% (179/179), 46.07 KiB | 924.00 KiB/s, done.
Resolving deltas: 100% (104/104), done.
$ cd serverless-sam
$ node --version
v14.17.3
$ npm --version
6.14.13
$ npm install
npm WARN deprecated [email protected]: Legacy versions of mkdirp are no longer supported. Please update to mkdirp 1.x. (Note that the API surface has changed to use Promises in 1.x.)
npm WARN deprecated [email protected]: Please use the native JSON object instead of JSON 3
npm WARN deprecated [email protected]: This module is no longer used. Please see @npmcli/arborist if you would like to build and reify package trees programmatically.
npm WARN deprecated [email protected]: v1 is no longer maintained. To avoid security and functionality issues please upgrade to latest version
npm WARN deprecated [email protected]: request has been deprecated, see https://github.com/request/request/issues/3142
npm WARN deprecated [email protected]: The functionality that this package provided is now in @npmcli/arborist
npm WARN deprecated [email protected]: This version of tar is no longer supported, and will not receive security updates. Please upgrade asap.
npm WARN deprecated [email protected]: this library is no longer supported
npm WARN deprecated [email protected]: If using 2.x branch, please upgrade to at least 2.1.6 to avoid a serious bug with socket data flow and an import issue introduced in 2.1.0
npm WARN deprecated [email protected]: The
npm WARN deprecated [email protected]: Please upgrade to latest, formidable@v2 or formidable@v3! Check these notes: https://bit.ly/2ZEqIau
npm WARN deprecated [email protected]: https://github.com/lydell/resolve-url#deprecated
npm WARN deprecated [email protected]: Please see https://github.com/lydell/urix#deprecated
npm WARN deprecated [email protected]: request-promise-native has been deprecated because it extends the now deprecated request package, see https://github.com/request/request/issues/3142
npm WARN deprecated @types/[email protected]: This is a stub types definition for chalk (https://github.com/chalk/chalk). chalk provides its own type definitions, so you don't need @types/chalk installed!

> [email protected] postinstall /home/cschroed/src/serverless-sam/node_modules/protobufjs
> node scripts/postinstall


> [email protected] postinstall /home/cschroed/src/serverless-sam/node_modules/es5-ext
>  node -e "try{require('./_postinstall')}catch(e){}" || exit 0


> [email protected] postinstall /home/cschroed/src/serverless-sam/node_modules/serverless
> node ./scripts/postinstall.js


   ┌───────────────────────────────────────────────────┐
   │                                                   │
   │   Serverless Framework successfully installed!    │
   │                                                   │
   │   To start your first project run 'serverless'.   │
   │                                                   │
   └───────────────────────────────────────────────────┘

npm notice created a lockfile as package-lock.json. You should commit this file.
npm WARN optional SKIPPING OPTIONAL DEPENDENCY: fsevents@~2.3.2 (node_modules/chokidar/node_modules/fsevents):
npm WARN notsup SKIPPING OPTIONAL DEPENDENCY: Unsupported platform for [email protected]: wanted {"os":"darwin","arch":"any"} (current: {"os":"linux","arch":"x64"})

added 1332 packages from 1399 contributors and audited 1333 packages in 52.911s

28 packages are looking for funding
  run `npm fund` for details

found 169 vulnerabilities (22 low, 54 moderate, 72 high, 21 critical)
  run `npm audit fix` to fix them, or `npm audit` for details

[cschroedl-gov]

Relates to #33