BUG: vm2 has been discontinued and has a critical vulnerability identified

Quick checklist

• I am using the latest version of Snowpack and all plugins.

What package manager are you using?

yarn

What operating system are you using?

macOS

Describe the bug

Snowpack adds a critical vulnerability by using vm2 as a dependency for esinstall.

vm2 has been discontinued see here

Steps to reproduce

N/A

Link to minimal reproducible example (optional)

No response