Issue description

I am using TypeOrm 0.3.20 in a project with SQL Server.

npm audit is surfacing the following vulnerability related to @azure/identity:

# npm audit report 
@azure/identity  <4.2.1
Severity: moderate
Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability - https://github.com/advisories/GHSA-m5vv-6r4h-3vj9
fix available via `npm audit fix --force`
Will install mssql@11.0.0, which is a breaking change
node_modules/@azure/identity
  tedious  11.0.9 - 18.2.0
  Depends on vulnerable versions of @azure/identity
  node_modules/tedious
    mssql  7.2.1 - 10.0.4
    Depends on vulnerable versions of tedious
    node_modules/mssql
      typeorm  0.3.6-dev.0418ebc - 0.3.6-dev.ef025bd || >=0.3.7-dev.1b5aa62
      Depends on vulnerable versions of mssql
      node_modules/typeorm
4 moderate severity vulnerabilities

It is possible to mitigate the issue by upgrading mssql to 11.0.x, however this causes a peer dependency conflict with typeorm 0.3.20.

What would be the ramifications of allowing mssql 11 as peer dependency in typeorm ? I am open to contribute.

Expected Behavior

No peer dependency conflict with mssql 11.0.0

Actual Behavior

Peer dependency conflict with mssql 11.0.0

Steps to reproduce

In a sample project:

1. Reference typeorm 0.3.20
2. Reference mssql 11.0.0
3. run npm install

My Environment

Additional Context

Unfortunately, I was not able to follow the typeorm security policy as the support@typeorm.io e-mail is unreachable.

Relevant Database Driver(s)

• aurora-mysql
• aurora-postgres
• better-sqlite3
• cockroachdb
• cordova
• expo
• mongodb
• mysql
• nativescript
• oracle
• postgres
• react-native
• sap
• spanner
• sqlite
• sqlite-abstract
• sqljs
• sqlserver

Are you willing to resolve this issue by submitting a Pull Request?

Yes, I have the time, but I don't know how to start. I would need guidance.