fix npm deps

package-lock.json

@@ -10697,6 +10697,19 @@
       "dev": true,
       "requires": {
         "shelljs": "^0.5.3"
+      },
+      "dependencies": {
+        "shelljs": {
+          "version": "0.8.5",
+          "resolved": "https://registry.npmjs.org/shelljs/-/shelljs-0.8.5.tgz",
+          "integrity": "sha512-TiwcRcrkhHvbrZbnRcFYMLl30Dfov3HKqzp5tO5b4pt6G/SezKcYhmDg15zXVBswHmctSAQKznqNW2LO5tTDow==",
+          "dev": true,
+          "requires": {
+            "glob": "^7.0.0",
+            "interpret": "^1.0.0",
+            "rechoir": "^0.6.2"
+          }
+        }
       }
     },
     "grunt-contrib-clean": {
@@ -12177,6 +12190,15 @@
         "util-deprecate": "~1.0.1"
       }
     },
+    "rechoir": {
+      "version": "0.6.2",
+      "resolved": "https://registry.npmjs.org/rechoir/-/rechoir-0.6.2.tgz",
+      "integrity": "sha1-hSBLVNuoLVdC4oyWdW70OvUOM4Q=",
+      "dev": true,
+      "requires": {
+        "resolve": "^1.1.6"
+      }
+    },
     "redent": {
       "version": "1.0.0",
       "resolved": "https://registry.npmjs.org/redent/-/redent-1.0.0.tgz",
@@ -12294,12 +12316,6 @@
         "is-primitive": "^3.0.1"
       }
     },
-    "shelljs": {
-      "version": "0.5.3",
-      "resolved": "https://registry.npmjs.org/shelljs/-/shelljs-0.5.3.tgz",
-      "integrity": "sha1-xUmCuZbHbvDB5rWfvcWCX1txMRM=",
-      "dev": true
-    },
     "sifter": {
       "version": "0.5.4",
       "resolved": "https://registry.npmjs.org/sifter/-/sifter-0.5.4.tgz",

package.json

@@ -7,6 +7,7 @@
     "url": "git://github.com/espocrm/espocrm.git"
   },
   "scripts": {
+    "preinstall": "npx npm-force-resolutions",
     "build": "grunt",
     "test": "grunt run-tests",
     "test-unit": "grunt run-unit-tests",
@@ -71,5 +72,8 @@
     "timepicker": "^1.11.15",
     "underscore": "^1.13.1",
     "vis": "^4.19.1"
+  },
+  "resolutions": {
+    "shelljs": "~0.8.5"
   }
 }