search

seanemmer / mongoose-seed

Seed data population for Mongoose
MIT License
52 stars 33 forks source link

Update lodash to 4.17.10 #29

Closed ohcibi closed 6 years ago

ohcibi commented 6 years ago

Reasoning: npm audit reports an unsolvable vulnerability when using mongoose-seed because of lodash-3.x.

Needed to update the use of pluck and unique in favor of map and uniq which require no further changes.

ohcibi commented 6 years ago

@seanemmer there is something wrong with the release on npm. It is still dependent on lodash 3.x. The package.json that gets installed also states that. The version of mongoose-seed however is correct (0.5.1) both reported by npm as in the package.json's version key. It appears that you released this commit: https://github.com/seanemmer/mongoose-seed/blob/bca0e8a540a233b10a7d57b9ce268ce7da7229d5/package.json on npm before you merged github's remote changes into your local master.