Dependency package vulnerabilities

nmarus / node-ews

A simple JSON wrapper for the Exchange Web Services (EWS) SOAP API.

MIT License

116 stars 52 forks source link

Closed jhenson29 closed 4 years ago

jhenson29 commented 5 years ago

NPM is reporting 8 vulnerabilities in the following package dependencies.

tunnel-agent lodash hoek

Can these be updated and publish a patch to npm?

Fishbowler commented 5 years ago

I've tried this on my fork and set my package.json to "fishbowler/node-ews" as the version, but lodash appears to bomb out on the latest version 😬

nmarus commented 4 years ago

This has been resolved in 3.4.2.