Github user mcgilman commented on the issue:
https://github.com/apache/nifi/pull/2941
@scottyaslan I believe we also need to update the package-lock.json that is
checked into source control. I noticed the package-lock.json is updated in the
front end working directory. ---
