Moderate severity vulnerability

npm audit gives me a warning:

┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate      │ Sandbox Breakout / Arbitrary Code Execution                  │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ static-eval                                                  │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=2.0.2                                                      │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @mapbox/leaflet-omnivore [dev]                               │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @mapbox/leaflet-omnivore > brfs > static-module >            │
│               │ static-eval                                                  │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://npmjs.com/advisories/758                             │
└───────────────┴──────────────────────────────────────────────────────────────┘

Please update brfs to latest version :-)

No file or test is named. Start by running npm audit and tracing the reported @mapbox/leaflet-omnivore > brfs > static-module > static-eval path; the work is done when the dependency uses a version with static-eval >=2.0.2 and the warning is gone.