NPM reports 63 High severity vulnerabilities

🐛 bug report

NPM found 63 High severity vulnerabilities when being installed/audited.

🎛 Configuration (.babelrc, package.json, cli command)

My package.json:

{
    "name": "dashboard",
    "version": "1.0.0",
    "scripts": {
        "start": "parcel src/dashboard.html",
        "build": "parcel build src/dashboard.html"
    },
    "license": "MIT",
    "dependencies": {
        "parcel-bundler": "^1.12.3",
        "typescript": "^3.5.3",
        "vue": "^2.6.10",
        "vue-hot-reload-api": "^2.3.3"
    },
    "devDependencies": {
        "@vue/component-compiler-utils": "^3.0.0",
        "apexcharts": "^3.8.2",
        "axios": "^0.19.0",
        "vue-apexcharts": "^1.3.6",
        "vue-property-decorator": "^8.2.1",
        "vue-template-compiler": "^2.6.10"
    }
}

🤔 Expected Behavior

The package should install with 0 vulnerabilities

😯 Current Behavior

On install/audit:

+ parcel-bundler@1.12.3
added 720 packages from 525 contributors and audited 8295 packages in 33.612s
found 63 high severity vulnerabilities

💁 Possible Solution

🔦 Context

💻 Code Sample

The NPM audit report: parcel-audit.txt

🌍 Your Environment

Software	Version(s)
Parcel	1.12.3
Node	12.4.0
npm/Yarn	6.9.0
Operating System	Windows 10 Pro x64

[lbalderrama]

@DeMoorJasper I agree with you on npm counting this has multiple deps.

I know this sounds trivial, and it doesn’t affect parcel, but it will be awesome to get rid of those warnings and the solutions look easy enough:

Remediation
If you are using set-value 3.x, upgrade to version 3.0.1 or later. 
If you are using set-value 2.x, upgrade to version 2.0.1 or later.

[sundayz]

https://www.npmjs.com/advisories/1012

This is what’s causing it, published today