title: The best way to resolve vulnerabilities in package-lock.json?
body: <p>I am warned about vulnerabilities in the packages listed in the <code>package-lock.json</code> file of my Node.Js project. </p>
  
  <p>I can follow the <a href="https://stackoverflow.com/questions/49582891/proper-way-to-fix-potential-security-vulnerability-in-a-dependency-defined-in-pa">advice here</a> and reinstall all the packages with <code>npm install &lt;package-name&gt;</code>, however, I also use other npm projects that use the older versions of those packages, which will not get reinstalled with a simple <code>npm install</code>.</p>
  
  <p>Does it mean I have to go to <code>package-lock.json</code> and manually change all the dependencies to the latest version? </p>
  
  <p>What if they break?</p>
  
  <p>Isn't there a proper way of doing the updates that ensures you won't break the other packages dependent on the old versions?</p>