Packages out of date

[NR-COSR]

I have been learning to leverage FancyTree over the past month or so and I've found it super useful. But I wanted to include the drag and drop functionality.
This meant that instead of loading a local JavaScript object I was loading a JSON. But I was running it locally and CORS got in the way. Fortunately there was an existing issue that explained how to run FancyTree locally.
But when I followed them NPM warned that a lot of the packages were in need of updates or had been deprecated. I didn't see any existing issues, but I also didn't know if this qualified as an issue, so I'm posting here to ask if I should create an issue for the dependencies being out of date.
Below is the text of my installation sadly the colors don't copy over so it is not as easy to read.

npm WARN deprecated [email protected]: The package has been renamed to `open`
npm WARN deprecated [email protected]: Version no longer supported. Upgrade to @latest

added 494 packages, and audited 495 packages in 59s

36 packages are looking for funding
  run `npm fund` for details

11 vulnerabilities (3 moderate, 8 high)

To address issues that do not require attention, run:
  npm audit fix

To address all issues possible (including breaking changes), run:
  npm audit fix --force

Some issues need review, and may require choosing
a different dependency.

Run `npm audit` for details.

C:\Data\FancyTree>npm audit fix

added 5 packages, removed 1 package, changed 46 packages, and audited 499 packages in 4s

37 packages are looking for funding
  run `npm fund` for details

# npm audit report

marked  <=4.0.9
Severity: high
Inefficient Regular Expression Complexity in marked - https://github.com/advisories/GHSA-5v2h-r2cx-5xgj
Inefficient Regular Expression Complexity in marked - https://github.com/advisories/GHSA-rrrm-qjm4-v8hf
fix available via `npm audit fix --force`
Will install [email protected], which is a breaking change
node_modules/marked

shelljs  <=0.8.4
Severity: high
Improper Privilege Management in shelljs - https://github.com/advisories/GHSA-64g7-mvw6-v9qj
Improper Privilege Management in shelljs - https://github.com/advisories/GHSA-4rq4-32rv-6wp6
No fix available
node_modules/shelljs
  grunt-yabs  *
  Depends on vulnerable versions of shelljs
  node_modules/grunt-yabs

taffydb  *
Severity: high
TaffyDB can allow access to any data items in the DB - https://github.com/advisories/GHSA-mxhp-79qh-mcx6
fix available via `npm audit fix --force`
Will install [email protected], which is a breaking change
node_modules/taffydb
  jsdoc  3.2.0-dev - 3.6.11
  Depends on vulnerable versions of taffydb
  node_modules/jsdoc
    grunt-jsdoc  >=0.4.1
    Depends on vulnerable versions of jsdoc
    node_modules/grunt-jsdoc

6 vulnerabilities (1 moderate, 5 high)

To address all issues possible (including breaking changes), run:
  npm audit fix --force

Some issues need review, and may require choosing
a different dependency.

C:\Data\FancyTree>```

[mar10]

You are right, some packages are out of date. They are only used for the build pipeline, so they should not affect the application itself.

It should be fixed though. at some point. If someone provides a PR, even better...