Vulnerabilities in dependencies

[nlaplante]

npm audit found vulnerabilities:

$ npm audit --registry https://registry.npmjs.org

                       === npm audit security report ===


                                 Manual Review
             Some vulnerabilities require your attention to resolve

          Visit https://go.npm.me/audit-guide for additional guidance


  Moderate        Regular Expression Denial of Service

  Package         semver

  Patched in      >=4.3.2

  Dependency of   git-tags [dev]

  Path            git-tags > semver

  More info       https://nodesecurity.io/advisories/31


  Low             Prototype Pollution

  Package         lodash

  Patched in      >=4.17.5

  Dependency of   git-tags [dev]

  Path            git-tags > lodash

  More info       https://nodesecurity.io/advisories/577

found 2 vulnerabilities (1 low, 1 moderate) in 30216 scanned packages
  2 vulnerabilities require manual review. See the full report for details.

Please update the lodash and semver dependencies.