Cross-Site Scripting vulnerability in uglifyjs-webpack-plugin plugin

[DimalChandrasiri]

Describe the bug
npm audit report will give a moderate security vulnerability for the webpack plugin uglifyjs-webpack-plugin which has an outdated dependency serialize-javascript in it's dependency list.

Vulnerability Report

To Reproduce
Steps to reproduce the behavior:

1. Go to the root of ìdentity-app` repository.
2. Run command npm audit to get the report.

Expected behavior
The npm audit command shouldn't have any vulnerabilities listed.

Screenshots

Desktop (please complete the following information):

• OS: MacOs Catelina
• Browser: N/A
• Version: N/A

[thivi]

Looks like this plugin's repo has been archived. It is better to replace this plugin with Terser[1][2].
The uglifyjs-webpack-plugin's repo says that the plugin has been deprecated and asks us to use the Terser plugin.[3]

[1] https://github.com/webpack-contrib/terser-webpack-plugin
[2] webpack-contrib/terser-webpack-plugin#15
[3] https://github.com/webpack-contrib/uglifyjs-webpack-plugin

[jeradrutnam]

Fixed: #301