There are packages with non-exact versions defined. This presents a security risk. [ { "package": "ipfs-core", "version": "^0.18.1" }, { "package": "ipfs-http-client", "version": "^60.0.1" }, { "package": "uint8arrays", "version": "^5.1.0" } ]