Moderate severity issue in dependency (ansi-regex)

[tneullas]

Hello, since last month there is a moderate severity vulnerability on plop package that is coming from ora > strip-ansi > ansi-regex dependency.

Would you consider updating ora package as version is really outdated (currently its 6.0.1) ?

See GHSA-93q8-gq69-wqmw for more informations on security issue.

[Pike]

ora moved over to ESM-only, so this isn't as trivial as one would hope.

[crutchcorn]

@Pike, you're 100% right and this is why we didn't update originally. I was originally going to wait for e2e tests before introducing them, but I ought to switch things over sooner than later. I'll work on some E2E tests and fix things tonight, alongside an update

I just saw your commit tho - Looks good for the most part (altho we would like to keep that export if we can). If it's okay, can I cherry-pick for part of my fix? EDIT: Just saw PR