Gatsby transitive security issues

[akshits96]

As of today even the latest version of Gatsby brings in multiple transitive security issues.Going through majority of the previous issues, it appears that all those issues are false positives in term of gatsby usage. It would be great if the project owners can have a list of false positives listed somewhere say Security.md as it helps the community to track and document this for compliance reasons. Open vulnerable libraries as of April 2022, which couldn't be found in discussions or issues:

• ansi-html:CVE-2021-23424
• ansi-regex:CVE-2021-3807
• shell-quote:CVE-2021-42740
• nth-check:CVE-2021-3803