Possible vulnerable/outdated packages

[malinah]

NPM is reporting use of vulnerable packages.

$ npm install
npm WARN @0.0.0 No repository field.
npm WARN @0.0.0 license should be a valid SPDX license expression

audited 5251 packages in 5.744s
found 35 vulnerabilities (12 low, 9 moderate, 14 high)
  run `npm audit fix` to fix them, or `npm audit` for details

$ npm -v
6.1.0

$ node --version
v10.4.1

$ yarn --version
1.7.0

Can the packages be updated to patched versions?

[good-lly]

need to rewrite to newer React and whole stack