Upgrade chokidar to 2.0+ to resolve security problem in dependency?

[ulyssesbbg]

Dustjs-linkedin 2.7.5 still depends on chokidar 1.5.2, which depends on a component which has a vulnerability: https://snyk.io/test/npm/braces/1.8.5

This dependent vulnerability is fixed in newer versions of chokidar, including 2.0.0, 2.0.1, and 2.0.2:
https://snyk.io/test/npm/chokidar/2.0.2?tab=dependencies

Can you please upgrade dustjs-linkedin to depend on chokidar 2.0.2 which in turn depends on a newer version of braces where this vulnerability is resolved?

[cduque]

npm audit reports this too https://www.npmjs.com/advisories/786

[joewagner]

The greenkeeper/initial branch has a fix for this. Anyone know if/when this will be merged?