Due to the significantly outdated component (dependencies, Node version etc.) and the fact that our goal today is to get rid of slug-built components, we disable the Grype vulnerability check.
When better times come, we will revitalize the component and the grype check must be re-enabled.
This is simply done by the GRYPE_DISABLED environment variable in Circle ci project settings (true/false)
See the docs for more details.