chai-properties uses older version of lodash that has vulnerability

vbardales / chai-properties

Properties matcher for chai that assert values have all the same attributes and values without asserting strict object equality.

16 stars 9 forks source link

Open sharathmuthu6 opened 5 years ago

sharathmuthu6 commented 5 years ago

chai-properties module is using the lodash's older version which is having vulnerability issue.

I tried raising a PR for the same. But I don't have access to create a branch in this repo. Can we please have this change in package.json ?

"dependencies": {
    "lodash": "~4.17.11"
  }

sharathmuthu6 commented 5 years ago

@vbardales Can you please make this change ?