glob-parent >=5.1.2 introduces a DOS issue

[reporter123]

The fallowing is yarns audit report for HTMLHint:

┌───────────────┬──────────────────────────────────────────────────────────────┐
│ high          │ Regular expression denial of service                         │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ glob-parent                                                  │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=5.1.2                                                      │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ htmlhint                                                     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ htmlhint > parse-glob > glob-base > glob-parent              │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1002627                     │
└───────────────┴──────────────────────────────────────────────────────────────┘

1 vulnerabilities found - Packages audited: 40

After investigating I found the both parse-glob and glob-base are dead projects which have seen no commits in 7 years. glob-parent itself has been updated to fix this issue.

[stuartbale]

This is the same as the issue reported here:
#664

[nschonni]

Closing it as a duplicate, but I'll rename the other one to make it clearer