Problem statement
We need to regularly check security vulnerabilities. NPM has this nice npm audit fix command that can be run for this purpose that we then want to run regularly.
Expected
We should have a job that runs npm audit fix once per day for example, and files automatically a PR against the evergreen repo if there's an update available.