update acorn version to latest

[alexander-akait]

Requested Update

update acorn version to latest 6 or 7

Why Is This Update Needed?

Vulnerabilities: Regular Expression Denial of Service

Reproduce:

1. Just run npm audit.

Are There Examples Of This Requested Update Elsewhere?

Nothing

[apepper]

This is the output, that audit currently gives, due to es-check requireing acorn 6.1.1:

npm audit

                       === npm audit security report ===

┌──────────────────────────────────────────────────────────────────────────────┐
│                                Manual Review                                 │
│            Some vulnerabilities require your attention to resolve            │
│                                                                              │
│         Visit https://go.npm.me/audit-guide for additional guidance          │
└──────────────────────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate      │ Regular Expression Denial of Service                         │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ acorn                                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=5.7.4 <6.0.0 || >=6.4.1 <7.0.0 || >=7.1.1                  │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ es-check                                                     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ es-check > acorn                                             │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://npmjs.com/advisories/1488                            │
└───────────────┴──────────────────────────────────────────────────────────────┘
found 1 moderate severity vulnerability in 16696 scanned packages
  1 vulnerability requires manual review. See the full report for details.

[AviVahl]

FYI @chmccc (current code owner?)

[akellbl4]

@chmccc @jongleberry anybody here?

[cssagogo]

Any update on this?

[ceisele-r]

Since #114 is now merged, could we please get an updated release?