What to do with npm audit messages?

Question

npm

Gentlemen, give me advice - how to deal with npm messages about vulnerabilities after installing a certain package:

found 8 vulnerabilities (2 low, 2 moderate, 4 high) in 8288 scanned packages
   vulnerabilities require manual review. See the full report for details.

I read here and on the Internet, but no specific actions are described. The only suggestion is to remove node_modules and package-lock and re-install npm - npm i
It doesn't help. Maybe someone solved this issue, share?
PS: Are these messages important at all or can they be turned off somehow?

Answer 1

Good day!
It is probably worth reacting at least to high-level vulnerabilities.
Usually, npm tells you which command to run to eliminate the threat.
Follow
And follow his advice, as a rule, it helps.
By itself, the command
does not install a new version of a package if specific versions (or version ranges) are specified in the dependencies.