Dependency loadsh.trimend is out of date and the dependency has known public CVEs - CVE-2020-28500

loadsh.trimend package is transitive dependency of botbuilder and botbuilder-dialogs.

botbuilder-dialogs --> @microsoft/recognizers-text-suite --> @microsoft/recognizers-text-number --> lodash.trimend

But for loadsh.trimend package https://www.npmjs.com/package/lodash.trimend, version 4.5.1 is already the latest version 8 years ago and seems loadsh.trimend is not maintained any more.