Update package.json shelljs dependabot Severity High 7.1 / 10

[arpu]

dependabot

https://access.redhat.com/security/cve/cve-2022-0144

@dmarcos the shelljs is only used in the https://github.com/aframevr/aframe/blob/master/scripts/preghpages.js is this still used?

[dmarcos]

Yeah it's used to deploy the examples. This is also a dev dependency. not bundled in the library

[arpu]

dependabot do not like it :) i could not test it, but would be nice to include the update

[dmarcos]

We gotta make sure there are no regressions. Also is a dev dependency that it's only used for A-Frame deployment. Pretty safe to ignore those warnings.

[arpu]

i understand, but for some securty audits ( iso ) this is not allowed