According to CVE-1179 from npm, we need to upgrade minimist to 0.2.1, 1.2.3 or later. But, current optimist depends on super old version of minimist: 0.0.1.
And, the author of optimist already deprecates this module, so it's better to migrate from optimist to yargs for command line argument parsing.
According to CVE-1179 from npm, we need to upgrade
minimist
to 0.2.1, 1.2.3 or later. But, currentoptimist
depends on super old version ofminimist
: 0.0.1.And, the author of
optimist
already deprecates this module, so it's better to migrate fromoptimist
toyargs
for command line argument parsing.