Please, check https://github.com/99x/react-scaffolder/security/dependabot – there is `72 alerts` I added dependabot auto PR to my fork and am going to make PR to yours repo. Diff: https://github.com/99x/react-scaffolder/compare/master...shapkarin:react-scaffolder:master