Feature suggestion
Per the auto-generated Snyk PR #4120 , the Eleventy library requires an update from 2.0.1 to 3.0.0 to resolve a pair of identified security vulnerabilities. As of this writing, there is no 2.x Eleventy release above 2.0.1 so the vulns can't be resolved with a minor update.
Other considerations and design implementaiton suggestions
Eleventy's release notes recommend using Eleventy's Upgrade Help plugin.