dependencies have security issues

[JensTimmerman]

running npm install in client on master results in:

found 40 vulnerabilities (11 moderate, 29 high)
  run `npm audit fix` to fix them, or `npm audit` for details

and

updated 2 packages in 5.585s
fixed 38 of 40 vulnerabilities in 8277 scanned packages
  1 package update for 2 vulns involved breaking changes
  (use `npm audit fix --force` to install breaking changes; or refer to `npm audit` for steps to fix these manually)

npm audit fix --force fixes these issues but might have unwanted side effects...