Package has many high severity depencies #2284

$ npm audit

# npm audit report

devalue  <=5.8.0
Severity: high
devalue has prototype pollution in devalue.parse and devalue.unflatten - https://github.com/advisories/GHSA-cfw5-2vxh-hr84
Sveltejs devalue's `devalue.parse` and `devalue.unflatten` emit objects with `__proto__` own properties - https://github.com/advisories/GHSA-mwv9-gp5h-frr4
Svelte devalue: DoS via sparse array deserialization - https://github.com/advisories/GHSA-77vg-94rm-hx3p
fix available via `npm audit fix --force`
Will install workflow@2.0.6, which is a breaking change
node_modules/devalue
  @workflow/core  *
  Depends on vulnerable versions of @workflow/world-local
  Depends on vulnerable versions of @workflow/world-vercel
  Depends on vulnerable versions of devalue
  node_modules/@workflow/core
    @workflow/builders  *
    Depends on vulnerable versions of @workflow/core
    node_modules/@workflow/builders
      @workflow/astro  *
      Depends on vulnerable versions of @workflow/builders
      Depends on vulnerable versions of @workflow/rollup
      Depends on vulnerable versions of @workflow/vite
      node_modules/@workflow/astro
      @workflow/nest  *
      Depends on vulnerable versions of @workflow/builders
      node_modules/workflow/node_modules/@workflow/nest
      @workflow/rollup  *
      Depends on vulnerable versions of @workflow/builders
      node_modules/@workflow/rollup
      @workflow/sveltekit  *
      Depends on vulnerable versions of @workflow/builders
      Depends on vulnerable versions of @workflow/rollup
      Depends on vulnerable versions of @workflow/vite
      node_modules/@workflow/sveltekit
      @workflow/vite  *
      Depends on vulnerable versions of @workflow/builders
      node_modules/@workflow/vite
    @workflow/cli  *
    Depends on vulnerable versions of @workflow/builders
    Depends on vulnerable versions of @workflow/core
    Depends on vulnerable versions of @workflow/world-local
    Depends on vulnerable versions of @workflow/world-vercel
    node_modules/@workflow/cli
    @workflow/next  *
    Depends on vulnerable versions of @workflow/builders
    Depends on vulnerable versions of @workflow/core
    node_modules/@workflow/next
    @workflow/nitro  *
    Depends on vulnerable versions of @workflow/builders
    Depends on vulnerable versions of @workflow/core
    Depends on vulnerable versions of @workflow/rollup
    Depends on vulnerable versions of @workflow/vite
    node_modules/@workflow/nitro
      @workflow/nuxt  *
      Depends on vulnerable versions of @workflow/nitro
      node_modules/@workflow/nuxt
    workflow  >=4.0.1-beta.0
    Depends on vulnerable versions of @workflow/astro
    Depends on vulnerable versions of @workflow/cli
    Depends on vulnerable versions of @workflow/core
    Depends on vulnerable versions of @workflow/nest
    Depends on vulnerable versions of @workflow/next
    Depends on vulnerable versions of @workflow/nitro
    Depends on vulnerable versions of @workflow/nuxt
    Depends on vulnerable versions of @workflow/rollup
    Depends on vulnerable versions of @workflow/sveltekit
    node_modules/workflow

undici  7.0.0 - 7.23.0
Severity: high
Undici: Malicious WebSocket 64-bit length overflows parser and crashes the client - https://github.com/advisories/GHSA-f269-vfmq-vjvj
Undici has an HTTP Request/Response Smuggling issue - https://github.com/advisories/GHSA-2mjp-6q6p-2qxm
Undici has Unbounded Memory Consumption in WebSocket permessage-deflate Decompression - https://github.com/advisories/GHSA-vrm6-8vpv-qv8q
Undici has Unhandled Exception in WebSocket Client Due to Invalid server_max_window_bits Validation - https://github.com/advisories/GHSA-v9p9-hfj2-hcw8
Undici has CRLF Injection in undici via `upgrade` option - https://github.com/advisories/GHSA-4992-7rv2-5pvq
Undici has Unbounded Memory Consumption in its DeduplicationHandler via Response Buffering that leads to DoS - https://github.com/advisories/GHSA-phc3-fgpg-7m6h
fix available via `npm audit fix --force`
Will install workflow@2.0.6, which is a breaking change
node_modules/undici
  @workflow/world-local  <=5.0.0-beta.12
  Depends on vulnerable versions of undici
  node_modules/@workflow/world-local
  @workflow/world-vercel  <=5.0.0-beta.10
  Depends on vulnerable versions of undici
  node_modules/@workflow/world-vercel

16 vulnerabilities (10 low, 6 high)

To address issues that do not require attention, run:
  npm audit fix

To address all issues (including breaking changes), run:
  npm audit fix --force