removing yarn and adding acknowledgement in readme

Author: bwang-icf

README-sdk-dev.md

@@ -12,7 +12,6 @@ It is intended for BB2 team members or others performing SDK development work.
 
 npm recommends install node using nvm (node version manager), for install instruction, check out: https://github.com/nvm-sh/nvm
 
-
 ```
 check nvm version:
 nvm -v
@@ -102,6 +101,7 @@ cd my_proj
 yarn init
 ...
 ```
+
 Setting npm config global settings will make subsequently created pacakge projects 'private'.
 
 Note that publishing package 'private' is a npm option that requires payment.
@@ -110,31 +110,38 @@ Note that publishing package 'private' is a npm option that requires payment.
 
 1. Consuming from npm registry:
 
-    ```
-    mkdir my_proj
-    cd my_proj
-    yarn init
-    yarn add cms-bluebutton-sdk
+   ```
+   mkdir my_proj
+   cd my_proj
+   yarn init
+   yarn add cms-bluebutton-sdk
 
-    continue adding other dependencies, e.g. express, ts-node, etc., ...
+   continue adding other dependencies, e.g. express, ts-node, etc., ...
 
-    yarn add express @types/express ts-node
-    yarn add <other dependencies>
-    ```
+   yarn add express @types/express ts-node
+   yarn add <other dependencies>
+   ```
 
 2. Consuming from a local SDK repository (as a good test before publishing):
 
-    After built and generated typescript types (needed if to be consumed by typescript project), the sdk can be consumed by other projects as shown by below example:
+   After built and generated typescript types (needed if to be consumed by typescript project), the sdk can be consumed by other projects as shown by below example:
 
-    ```
-    mkdir my_proj
-    cd my_proj
-    yarn init
-    yarn add <path to local cms-bluebutton-sdk local repository base directory>
+   ```
+   mkdir my_proj
+   cd my_proj
+   yarn init
+   yarn add <path to local cms-bluebutton-sdk local repository base directory>
+
+   continue adding other dependencies, e.g. express, ts-node, etc., ...
 
-    continue adding other dependencies, e.g. express, ts-node, etc., ...
+   yarn add express @types/express ts-node
+   yarn add <other dependencies>
+   ```
 
-    yarn add express @types/express ts-node
-    yarn add <other dependencies>
+# It is known that there are traces of yarn being used in this repo, however Snyk currently blocks the merge of yarn 1.22.22 despite it being the latest version due to the fact that there is a security vulnerability. The steps listed here can still be followed after running:
+
+    ```
+    npm install yarn
     ```
 
+# In the future, we would like to move to using only a single package manager.