Request to run npm update

Where to find the issue

https://github.com/corona-warn-app/cwa-website/blob/master/package-lock.json

Describe the issue

npm audit
found 276 vulnerabilities (13 moderate, 262 high, 1 critical) in 1609 scanned packages
  run `npm audit fix` to fix 261 of them.
  15 vulnerabilities require manual review. See the full report for details.

It seems that the npm packages were last updated by @svengabr through https://github.com/corona-warn-app/cwa-website/pull/686 on Dec 17, 2020, almost 5 months ago.

Suggested change

run

npm update -dev

(I don’t want to do this myself, because I can only do it in a fork. If it is done by somebody from the Open Source Team, then it can be done in a branch of the repository, instead of a branch of a fork of the repository. The first way is better for testing.)

---

Internal Tracking ID: EXPOSUREAPP-7150

[MikeMcC399]

Fixed by #1294.

[Ein-Tim]

Which version of npm are you using locally and under which operating system? You should be OK if you have 6.14.x.

Yes, I have 6.14.12 and npm does not show me the info to update npm anymore after #1250.

Thank you for your help!