Dependencies of @ionic/v1-toolkit have 10 vulnerabilities (2 low, 8 high)

**Description:**

When creating a new Ionic-v1 project which includes the Ionic toolkit. When I then install ionic-native using
```
npm i ionic-native --save
```
I get the following (npm audit fix doesn't fix any vulnerabilities):

**Output:**

=== npm audit security report ===

Run npm install --save-dev gulp@4.0.0 to resolve 5 vulnerabilities
SEMVER WARNING: Recommended action is a potentially breaking change

Low Prototype Pollution

Package lodash

Dependency of gulp [dev]

Path gulp > vinyl-fs > glob-watcher > gaze > globule > lodash

More info https://nodesecurity.io/advisories/577

High Regular Expression Denial of Service

Package minimatch

Dependency of gulp [dev]

Path gulp > vinyl-fs > glob-stream > glob > minimatch

More info https://nodesecurity.io/advisories/118

High Regular Expression Denial of Service

Package minimatch

Dependency of gulp [dev]

Path gulp > vinyl-fs > glob-stream > minimatch

More info https://nodesecurity.io/advisories/118

High Regular Expression Denial of Service

Package minimatch

Dependency of gulp [dev]

Path gulp > vinyl-fs > glob-watcher > gaze > globule > glob >
minimatch

More info https://nodesecurity.io/advisories/118

High Regular Expression Denial of Service

Package minimatch

Dependency of gulp [dev]

Path gulp > vinyl-fs > glob-watcher > gaze > globule > minimatch

More info https://nodesecurity.io/advisories/118

Manual Review
Some vulnerabilities require your attention to resolve

Visit https://go.npm.me/audit-guide for additional guidance


High Regular Expression Denial of Service

Package minimatch

Patched in >=3.0.2

Dependency of @ionic/v1-toolkit [dev]

Path @ionic/v1-toolkit > gulp > vinyl-fs > glob-stream > glob >
minimatch

More info https://nodesecurity.io/advisories/118


High Regular Expression Denial of Service

Package minimatch

Patched in >=3.0.2

Dependency of @ionic/v1-toolkit [dev]

Path @ionic/v1-toolkit > gulp > vinyl-fs > glob-stream >
minimatch

More info https://nodesecurity.io/advisories/118


High Regular Expression Denial of Service

Package minimatch

Patched in >=3.0.2

Dependency of @ionic/v1-toolkit [dev]

Path @ionic/v1-toolkit > gulp > vinyl-fs > glob-watcher > gaze >
globule > glob > minimatch

More info https://nodesecurity.io/advisories/118


High Regular Expression Denial of Service

Package minimatch

Patched in >=3.0.2

Dependency of @ionic/v1-toolkit [dev]

Path @ionic/v1-toolkit > gulp > vinyl-fs > glob-watcher > gaze >
globule > minimatch

More info https://nodesecurity.io/advisories/118


Low Prototype Pollution

Package lodash

Patched in >=4.17.5

Dependency of @ionic/v1-toolkit [dev]

Path @ionic/v1-toolkit > gulp > vinyl-fs > glob-watcher > gaze >
globule > lodash

More info https://nodesecurity.io/advisories/577

found 10 vulnerabilities (2 low, 8 high) in 6476 scanned packages
5 vulnerabilities require semver-major dependency updates.
5 vulnerabilities require manual review. See the full report for details.

**My `ionic info`:**
I'm using Ionic CLI 4.5.0

未指定來源檔案或測試。先定位 @ionic/v1-toolkit 的套件中繼資料並重現 npm audit 報告，然後追蹤其 gulp 相依鏈。解決列出的 minimatch 和 lodash 漏洞，並確認 audit 不再回報這些漏洞，即表示完成。

由索引模型根據 Issue 內容生成。