update core dependency: remove direct dependency on body-parser

[Meir017]

since express depends on body-parser directly there is no need to depend on a specific version of express and body-parser

https://github.com/expressjs/express/blob/master/package.json#L32

[coveralls]

Coverage remained the same at 93.878% when pulling bc72874 on Meir017:patch-2 into 1ca812a on nestjs:master.

[Meir017]

@kamilmysliwiec @thomrick any update on this?

[kamilmysliwiec]

What's the benefit here? As I remember body-parser has a vulnerability (#517) and it would be safer to enforce recent version.

[lock]

This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.