the version of minimatch used in serve-handler has a security vulnerability. It has to be updated to the latest version.