shashkovdanil / clean-publish

Removing configuration files and fields in package.json before publishing to npm

Home Page:https://www.npmjs.com/package/clean-publish

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Yargs-parser : low security vulnerability

isarvindone opened this issue · comments

Getting this vulnerability due to a dependency of clean-publish. Though this problem only matters in devDependencies, I feel it is better to resolve it as much as possible. I also verified that the latest version of yargs does not have this vulnerability.

Screenshot 2020-10-10 at 2 14 12 PM

Is it possible to update the dependency without breaking anything?