Dependency vulnerability

[metju90]

FYI you are using phantomjs-prebuilt which is using extract-zip@1.6.5 and extract-zip has a dependency debug@2.2.0 which is vulnerable. The latter is vulnerable itself and is also using a dependency ( ms@0.7.1 ) which has the same vulnerability.

Both vulnerable dependencies have fixed their issues but extract-zip latest version, 1.6.5 is still using the vulnerable versions.

More info: https://snyk.io/test/npm/karma-phantomjs-launcher

[radziksh]

@dignifiedquire JFYI I found some more vulnerabilities using the command yarn audit (we use yarn instead of npm):