Serenity-js NPM audit fails

[abhinaba-ghosh]

Hi Jan,

I am using:

"@serenity-js/core": "1.5.4",
"@serenity-js/cucumber": "1.0.0",
"@serenity-js/rest": "1.1.1",

It causes some severe npm audit failure. Please provide a patch for the fix:

  Low             Prototype Pollution                                           
                                                                                
  Package         lodash                                                        
                                                                                
  Patched in      >=4.17.5                                                      
                                                                                
  Dependency of   @serenity-js/core                                             
                                                                                
  Path            @serenity-js/core > lodash                                    
                                                                                
  More info       https://nodesecurity.io/advisories/577                        
                                                                                
                                                                                
  Low             Prototype Pollution                                           
                                                                                
  Package         lodash                                                        
                                                                                
  Patched in      >=4.17.5                                                      
                                                                                
  Dependency of   @serenity-js/cucumber                                         
                                                                                
  Path            @serenity-js/cucumber > @serenity-js/core > lodash            
                                                                                
  More info       https://nodesecurity.io/advisories/577                        
                                                                                
                                                                                
  High            Prototype Pollution                                           
                                                                                
  Package         lodash                                                        
                                                                                
  Patched in      >=4.17.11                                                     
                                                                                
  Dependency of   @serenity-js/core                                             
                                                                                
  Path            @serenity-js/core > lodash                                    
                                                                                
  More info       https://nodesecurity.io/advisories/782                        
                                                                                
                                                                                
  High            Prototype Pollution                                           
                                                                                
  Package         lodash                                                        
                                                                                
  Patched in      >=4.17.11                                                     
                                                                                
  Dependency of   @serenity-js/cucumber                                         
                                                                                
  Path            @serenity-js/cucumber > @serenity-js/core > lodash            
                                                                                
  More info       https://nodesecurity.io/advisories/782                        
                                                                                
                                                                                
  High            Prototype Pollution                                           
                                                                                
  Package         lodash                                                        
                                                                                
  Patched in      >=4.17.12                                                     
                                                                                
  Dependency of   @serenity-js/core                                             
                                                                                
  Path            @serenity-js/core > lodash                                    
                                                                                
  More info       https://nodesecurity.io/advisories/1065                       
                                                                                
                                                                                
  High            Prototype Pollution                                           
                                                                                
  Package         lodash                                                        
                                                                                
  Patched in      >=4.17.12                                                     
                                                                                
  Dependency of   @serenity-js/cucumber                                         
                                                                                
  Path            @serenity-js/cucumber > @serenity-js/core > lodash            
                                                                                
  More info       https://nodesecurity.io/advisories/1065  

[abhinaba-ghosh]

@jan,

will the fix available in the serenity-js 1 version? It will be a grt help.