vulnerability warning in npm packages when creating Expo project

Question

When i install some npm packages into my projects, for most, i get a warning or a vulnerability error.

npm WARN deprecated svgo@1.3.2: This SVGO version is no longer supported. Upgrade to v2.x.x.

npm WARN deprecated graphql-tools@3.0.0: This package has been deprecated and now it only exports makeExecutableSchema.\nAnd it will no longer receive updates.\nWe recommend you to migrate to scoped packages such as @graphql-tools/schema, @graphql-tools/utils and etc.\nCheck out https://www.graphql-tools.com to learn what package you should use instead

27 vulnerabilities (16 moderate, 9 high, 2 critical)

the above was displayed when i created an expo project. my questions are:

• What can i do to fix the vulnerabilities?
• Most warnings are enter code herefrom deprecated packages. What can be done about them?
• For projects where security is important, What i'm i supposed to do?

Answer 1

You can update the dependencys, normaly is that, you have a npm update in global outside your proyect but maybe inside your new proyect not yet so use: npm install -g npm-check

Here you have a link who explain all of that, but is in spanish: https://lenguajejs.com/npm/administracion/actualizar-dependencias-npm/