high severity vulnerabilities warnings in npm install

[myan9]

When I npm install on the top-level, I got 8 high severity vulnerabilities warning, and with npm audit, I got:

node-gyp used tar version prior to 4.4.2, which is vulnerable to Arbitrary File Overwrite.

For reference: node-gyp updated it's tar version to the latest in this commit: nodejs/node-gyp@1456ef2. Since we're using pining dependencies, we need to watch for new lerna release. (FYI: lerna 3.13.2 doesn't help.)

[starpit]

i have opened an issue against lerna: lerna/lerna#2036

[starpit]

root cause: nodejs/node-gyp#1717

[myan9]

Fixed