[Snyk Alert] Fix for 1 vulnerable dependency path

[snyk-bot]

The following newly disclosed vulnerabilities impact one or more of the npm packages this project uses:

• npm:tough-cookie:20160722

As these vulnerabilities are now publicly known, attackers can try to use them against your application, making fixing them a matter of urgency.

To help expedite the fix, Snyk created this pull request with the necessary changes to address the vulnerabilities.

This pull request includes:

• package.json scripts and a Snyk policy (.snyk) file, which patch the vulnerabilities that can't be upgraded away.

You can read more about Snyk's upgrade and patch logic in Snyk's documentation. Each vulnerability advisory includes information about the vulnerable versions, and direct links to the available patches.

Note that this pull request only addresses the newly disclosed vulnerabilities mentioned above.

See the Snyk test report to review and remediate the full list of vulnerable dependencies.

Please check the changes in this PR to ensure they won't cause issues with your application.

Stay secure,

The Snyk team

[guypod]

May I ask what was the reason you didn't merge this change?

Don't mean to critique, just asking to help us improve future notifications and fixes!

[jescalan]

hey @guypod I already responded to you the last time I closed a PR and you came in here and asked: https://github.com/static-dev/spike-core/pull/159#issuecomment-231747154

[guypod]

Oops, repeat question :) Thanks, and sorry for the noise.