@phosphor-icons/react vulnerabilities — Scandar