lodash depedency version causing vulnerabilities

sbycrosz / react-native-credit-card-input

Easy, cross-platform credit-card input for your React Native Project! Start accepting payment 💰 in your app today!

MIT License

1.46k stars 699 forks source link

lodash depedency version causing vulnerabilities #179

Closed reneerrusso closed 2 months ago

reneerrusso commented 4 years ago

Lodash dependency version is too low causing vulnerabilities below.

https://npmjs.com/advisories/1065 https://npmjs.com/advisories/782

Need version 4.17.13 or later. Please update lodash dependency or change the way dependencies are installed for this package this way we can use our own version of lodash.

Thanks! :D

gumiranda commented 3 years ago

yeah, fix this please