npm audit fix: resolve security vulnerabilities in RNMapsSampleApp

[Copilot]

8 known vulnerabilities (5 high, 3 moderate) in the React Native sample app's dependency tree. Running npm audit fix updates package-lock.json to pull in patched transitive versions.

Fixed

Package	Severity	Issue
lodash	High	Code injection / prototype pollution
flatted	High	Unbounded recursion DoS / prototype pollution
glob	High	CLI command injection
picomatch	High	Method injection / ReDoS
fast-xml-parser	High → resolved	Numeric entity expansion bypass
ajv	Moderate	ReDoS via $data option
brace-expansion	Moderate	Zero-step sequence DoS
yaml	Moderate	Stack overflow on deeply nested collections

Remaining (7 moderate)

fast-xml-parser via @react-native-community/cli chain still has one moderate CVE (GHSA-jp2q-39xq-3w4g). The fix requires npm audit fix --force, which bumps @react-native-community/cli to v20 — a breaking change deferred intentionally.

Only package-lock.json changed — no production source modifications.

[Copilot]

Copilot wasn't able to review any files in this pull request.

Files not reviewed (1)

• react_native/trimblemaps-mobile-sdk-demo-reactnative/react_native/RNMapsSampleApp/package-lock.json: Language not supported

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.