AB#129522 - Fix critical / high dependencies in back-end

[Joselgc1]

Description

Updated several backend packages and dependencies to address the npm audit findings, then refreshed the dependency tree by running npm install. It also replaces the jsonpath package with a maintained alternative while keeping the existing usage pattern intact.

Useful links

• https://dev.azure.com/WHOHQ/EMSSAFE/_workitems/edit/129522/

Type of change

Please delete options that are not relevant.

• Bug fix (non-breaking change which fixes an issue)
• Improvement (refactor or addition to existing functionality)

Checklist:

( * == Mandatory )

• * I have set myself as assignee of the pull request
• * My code follows the style guidelines of this project
• * Linting does not generate new warnings
• * I have performed a self-review of my own code
• * I have put the ticket for review, adding the oort-backend team to the list of reviewers
• * I have commented my code, particularly in hard-to-understand areas
• * I have put JSDoc comment in all required places
• * My changes generate no new warnings
• * I have included screenshots describing my changes if relevant
• * I have selected labels in the Pull Request, according to the changes with code brings
• I have made corresponding changes to the documentation ( if required )
• I have added tests that prove my fix is effective or that my feature works
• New and existing unit tests pass locally with my changes
• Any dependent changes have been merged and published in downstream modules

[AntoineRelief]

@Joselgc1
why this change?
jsonpath also has a new version, no?

[Joselgc1]

@AntoineRelief I tried to do that and just upgrade jsonpath to its latest version (1.3.0), but the audit still showed 13 vulnerabilities, with 2 high ones, because jsonpath uses underscore@1.13.6. Then I saw that with jsonpath-plus we had no high errors so I used that. Do you want me to switch it back with the latest version?

[AntoineRelief]

@Joselgc1
Okay, well I agree with the change + jsonpath-plus seems to have more support, but let's remove the util & use the library without an additional wrapper

[AntoineRelief]

@Joselgc1
Okay, well I agree with the change + jsonpath-plus seems to have more support, but let's remove the util & use the library without an additional wrapper