Security Violations in Sonatype scan

[arthurtalkgoal]

We have a security scan on the project that there are some depending packages not passing the scanning.

And below are the npm ls of the package dependencies. namely - lodash 3.10.1, mongoose 4.13.21, express 4.17.1, mongodb 2.2.34

Policy Violations - Security-Critical

├─┬ [email protected]
│ ├─┬ [email protected]
│ │ └── [email protected]

├─┬ [email protected]
│ └── [email protected]

Policy Violations - Security-High

└─┬ [email protected]
└── [email protected]

├─┬ [email protected]
│ └─┬ [email protected]
│ └── [email protected]