yarn install --flat
    git add node_modules

Then the next time you run yarn upgrade:

    yarn upgrade --flat
    git diff

Carefully read through what changed in each of the packages.

    git add node_packages
    git commit -m "yarn upgrade"

You will see a lot of bad code, but also learn stuff. But most importantly - your project will be secure.