When I run
I don't understand why a fresh out of the box project would contain this many "issues".
I searched the internet and a few of the blogs I ran across seemed to imply these "vulnerabilities" were actually just with the build environment and would not be deployed to the server or client machines . Indeed, I think many people have been ignoring these vulnerabilities for quite some time since today's vulnerability count seems much higher than the counts the authors were getting back when they originally published their posts.
To make matters even more confusing, while I think  does seem to indicate the problems are not going to be deployed, it still seems to indicate the "vulnerabilities" should be addressed. Also,  appears to be selling something so the author may be a little biased.
Running "npm audit" and checking the "Dependency Of" flag per  does seem imply that the vast majority of these vulnerabilities are specific to the development environment. It does in fact, seem to me that these problems will never make it into the SharePoint Online server or onto the machines of our end users.
Given the above, what should I do about this massive list of "vulnerabilities"?