We are using SNYK and after adding the jiff package a medium vulnerability was detected, connected to the add operation. See https://security.snyk.io/vuln/SNYK-JS-JIFF-1017118 for more information It would've been great if additional validation was made to get rid of this vulnerability.