Please remove .yarn/cache from repo (add to .gitignore), it has vulnerable packages causing failing security scans

[jeffbski-rga]

The .yarn/cache folder in this repo contains many vulnerable vulnerable packages causing failing security scans.

I doubt that the .yarn folder should be checked in at all either, but at least remove .yarn/cache.

You could remove it and add it to .gitignore.

[jeffbski-sketch]

#301 fixes this issue

[crzepa]

This is actually how Yarn Zero-Installs works;
https://yarnpkg.com/features/caching#zero-installs

What needs to be done to fix this is to whitelist what files should be added to the published bundle, so that the .yarn folder is not included.