Merge pull request #778 from BranchMetrics/gdeluna-branch/SDK-1787

npm audit fix

Author: gdeluna-branch

.gitignore

@@ -52,3 +52,6 @@ Pods
 
 # for now. not such a great idea. need to sort the bundler 1.x/2.x issue here.
 Gemfile.lock
+
+# yarn lock file, use `yarn import` to generate from package-lock.json 
+yarn.lock