Merge pull request #264 from segmentio/pj/vuln-fix

Few dependency fixes

.circleci/config.yml

@@ -26,9 +26,6 @@ workflows:
   static_analysis:
     jobs:
       - test
-      - size:
-          requires:
-            - test
       - coverage:
           requires:
             - test
@@ -100,13 +97,6 @@ jobs:
       - checkout
       - attach_workspace: { at: . }
       - run: yarn run report-coverage
-  size:
-    docker:
-      - image: circleci/node:10-browsers
-    steps:
-      - checkout
-      - attach_workspace: { at: . }
-      - run: yarn run size
   snyk:
     docker:
       - image: circleci/node:10-browsers

package.json

@@ -12,16 +12,9 @@
   "engines": {
     "node": ">=4"
   },
-  "size-limit": [
-    {
-      "limit": "25 KB",
-      "path": "index.js"
-    }
-  ],
   "scripts": {
     "circle-lint": ".buildscript/circle.sh",
     "dependencies": "yarn",
-    "size": "size-limit",
     "test": "standard && nyc ava --timeout=20s&& .buildscript/e2e.sh",
     "report-coverage": "nyc report --reporter=lcov > coverage.lcov && codecov",
     "np": "np --no-publish",
@@ -61,8 +54,12 @@
     "nyc": "^14.1.1",
     "pify": "^4.0.1",
     "sinon": "^7.3.2",
-    "size-limit": "^1.3.5",
     "snyk": "^1.171.1",
     "standard": "^12.0.1"
+  },
+  "resolutions": {
+    "kind-of": "^6.0.3",
+    "lodash": "^4.17.19",
+    "set-value": "^2.0.1"
   }
 }