From 2e41a7509d2c5d81fb48f945e7a9601584ffb7aa Mon Sep 17 00:00:00 2001 From: Gorgi Kosev Date: Thu, 10 May 2018 13:22:36 +0100 Subject: [PATCH] Update vulnerable lodash version This is triggering security failures when using [nodesecurity/nsp](https://github.com/nodesecurity/nsp) and will soon also fail in npm due to built-in nsp support. --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index dc250c01..486df583 100644 --- a/package.json +++ b/package.json @@ -21,7 +21,7 @@ }, "dependencies": { "sliced": "0.0.x", - "lodash": "4.1.x" + "lodash": "^4.17.5" }, "devDependencies": { "jshint": "*",