Unsafe dependencies

[luxplanjay]

Was in a process of making PR with some tiny changes. Probably should update dep versions just to be safe.

npm audit image

[caroso1222]

Sorry for the late response. Thanks for bringing this up. v3.0.0 has just been released and the npm critical vulnerabilities have been all fixed. I'll mark this as resolved and put the npm audit log here for reference:

$npm audit
                                                                                
                       === npm audit security report ===                        
                                                                                
┌──────────────────────────────────────────────────────────────────────────────┐
│                                Manual Review                                 │
│            Some vulnerabilities require your attention to resolve            │
│                                                                              │
│         Visit https://go.npm.me/audit-guide for additional guidance          │
└──────────────────────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Low           │ Regular Expression Denial of Service                         │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ braces                                                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=2.3.1                                                      │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ lite-server [dev]                                            │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ lite-server > browser-sync > micromatch > braces             │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://nodesecurity.io/advisories/786                       │
└───────────────┴──────────────────────────────────────────────────────────────┘
found 1 low severity vulnerability in 12329 scanned packages
  1 vulnerability requires manual review. See the full report for details.