Update fairmont to latest version to avoid vulnerability with minimatch

pandastrike / yaml-cli

A simple CLI for querying and updating YAML files

ISC License

86 stars 5 forks source link

Update fairmont to latest version to avoid vulnerability with minimatch #29

Open Lukenickerson opened 5 years ago

Lukenickerson commented 5 years ago

Fairmont version ^1.0.0-beta-40 includes an older version of minimatch which has a security vulnerability. See: https://nodesecurity.io/advisories/118

Consider upgrading to the latest version of fairmont (currently 2.0.1).