Use recent npm and yarn for security reasons.

Dockerfile

@@ -3,7 +3,10 @@ ENV NODE_ENV=production
 COPY assets/tenant/package* /app/
 COPY assets/tenant/yarn.lock /app/
 
-RUN apk add --no-cache nodejs yarn \
+##RUN apk add --no-cache nodejs yarn npm \
+RUN apk add --no-cache nodejs npm \
+	&& npm install -g yarn@1.21.1 \
+	&& npm install -g npm@6.13.4 \
 	&& yarn config set @folio:registry https://repository.folio.org/repository/npm-folio/ \
 	&& cd /app \
 	&& yarn \
@@ -28,8 +31,11 @@ ENV npm_config_cache=/tmp/.npm \
 	PORT=3000 \
 	PATH="/app/node_modules/.bin:${PATH}"
 
-RUN apk add --no-cache nodejs yarn npm curl \
-  && addgroup -S ${APP_USER} \
+##RUN apk add --no-cache nodejs yarn npm curl \
+RUN apk add --no-cache nodejs npm curl \
+	&& npm install -g yarn@1.21.1 \
+	&& npm install -g npm@6.13.4 \
+    && addgroup -S ${APP_USER} \
 	&& adduser -S -h /home/${APP_USER} -G ${APP_USER} -s /bin/sh ${APP_USER} \
 	&& chown ${APP_USER}:${APP_USER} . -R \
 	&& su ${APP_USER} -c "yarn config set @folio:registry https://repository.folio.org/repository/npm-folio/"