"potential security vulnerabilities in your dependencies" (package.json)

[ScrambledRK]

update dependencies. ideally of backend (composer), frontend (bower) and build (package). the warning is about package.json though so at least update those. updating frontend dependencies has proofed to be very very difficult in the past and may entail (as it already has) more than just updating the dependency versions but also rewriting some of the code.