dependency of dependency vulnerability: coa latest version

[t-gilb]

while installing dependencies (from a project bootstrapped using cra), I had some notifications from my antivirus.
It also stopped the installation of this dependency and prevented file to be copied.

this is an already known issue: ticket

workaround: I had to add the following lines to my package.json to use a specific version of that package.

  "resolutions": {
    "coa": "2.0.2"
  },

fix: we should not use the latest version (2.1.1) of that package.