Security vulnerabilities with minimatch, grunt-cli using npm audit

[crackernutter]

I'm getting 4 security vulnerabilities on this package (3 high, 1 low) on lodash and minmatch when running npm audit. I'm not really clear on how to deal with them on my end, but my security team would like them resolved. Do I need to fork this, update the dependencies, and host it myself, or can someone fix these in this repo? Unclear on the best path forward here....