As referred to in Issue #106 , this package has a number of vulnerable dependencies. The PR fixes these by updating the deps in the package.json file.
I patched them using Snyk & included it as a dev dependency. The "npm test" command (previously just said no test specified) now runs snyk test on the repo to check for vulnerable dependencies. This makes detection & patching much easier.
As referred to in Issue #106 , this package has a number of vulnerable dependencies. The PR fixes these by updating the deps in the package.json file.
I patched them using Snyk & included it as a dev dependency. The "npm test" command (previously just said no test specified) now runs snyk test on the repo to check for vulnerable dependencies. This makes detection & patching much easier.