We noticed a couple of alerts by dependabot. https://nvd.nist.gov/vuln/detail/CVE-2022-0235 https://nvd.nist.gov/vuln/detail/CVE-2020-15168 I think we should bump node-fetch npm.