{
    "ignore": [
        {
            "id" : "CVE-2022-21944",
            "reason": "fb-watchman@2.0.1 is the latest version"
        },
        {
            "id" : "CVE-2021-23446",
            "reason" : "It requires upgrading handsontable to 10.0.0+ but it breaks table builder. See https://trello.com/c/fIZ6RyXD/1029-upgrade-handsontable"
        },
        {
            "id" : "sonatype-2020-1025",
            "reason" : "It requires upgrading handsontable to 10.0.0+ but it breaks table builder. See https://trello.com/c/fIZ6RyXD/1029-upgrade-handsontable"
        },
        {
            "id" : "CVE-2021-23362",
            "reason" : "hosted-git-info@2.8.9 is a dependency of auditjs for which we use the latest version"
        },
        {
            "id" : "sonatype-2017-0717",
            "reason" : "We are using the latest react 17 (17.0.2) - require major upgrade"
        }
    ]
}

{
    "ignore": [
        {
            "id" : "CVE-2022-21944",
            "reason": "fb-watchman@2.0.1 is the latest version"
        },
        {
            "id" : "CVE-2021-23446",
            "reason" : "It requires upgrading handsontable to 10.0.0+ but it breaks table builder. See https://trello.com/c/fIZ6RyXD/1029-upgrade-handsontable"
        },
        {
            "id" : "sonatype-2020-1025",
            "reason" : "It requires upgrading handsontable to 10.0.0+ but it breaks table builder. See https://trello.com/c/fIZ6RyXD/1029-upgrade-handsontable"
        },
        {
            "id" : "CVE-2021-23362",
            "reason" : "hosted-git-info@2.8.9 is a dependency of auditjs for which we use the latest version"
        },
        {
            "id" : "sonatype-2017-0717",
            "reason" : "We are using the latest react 17 (17.0.2) - require major upgrade"
        },
        {
            "id" : "sonatype-2022-3677",
            "reason" : "Latest node-fetch@3.2.6 does not fix the vulnerability"
        }
    ]
}

Add node-fetch to audit allow list until the vulnerability is fixed upstream
Add node-fetch to audit allow list until the vulnerability is fixed upstream
