@kitware/vtk.js rely on
node_modules/xmlbuilder2 which depend on /node_modules/js-yaml
js-yaml <3.14.2 which has prototype pollution issues:
Severity: moderate js-yaml has prototype pollution in merge (<<) - https://github.com/advisories/GHSA-mh29-5h37-fv8m