dot-prop vulnerability alert when installing ndb

[ghost]

Steps to reproduce

Tell us about your environment:

• ndb version: 1.1.5
• Platform / OS version: Windows 10
• Node.js version: 12.18.3 x64

What steps will reproduce the problem?

Please include code that reproduces the issue.

1. npm install ndb --save-dev

   found 1 high severity vulnerability
   run `npm audit fix` to fix them, or `npm audit` for details

2. npm audit fix

   fixed 0 of 1 vulnerability in 144 scanned packages
   1 vulnerability required manual review and could not be updated

3. npm audit

   High            Prototype Pollution
   
   Package         dot-prop
   
   Patched in      >=5.1.1
   
   Dependency of   ndb [dev]
   
   Path            ndb > update-notifier > configstore > dot-prop
   
   More info       https://npmjs.com/advisories/1213

   What is the expected result? Ndb would install without a problem.

What happens instead? I got a scary looking vulnerability alert by npm.

I wanted to know if there was a patch for the vulnerability or if it was just overlooked somehow. I would also like to know what the current work arounds I can use at the current time.

[thinh105]

Please fix that,