What are the benefits to updating frontend packages. Are there security vulnerabilities that I should be worrying about if most of my npm dependecies dont get updated.