sindresorhus / dot-prop

Get, set, or delete a property from a nested object using a dot path

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Version 4.2.0 is default in nodejs

dominopetter opened this issue · comments

Not sure if this is the right forum for this but the old and insecure version of dot-prop 4.2.0 is still being installed in nodejs causing some security issues. Trying to update it does not work due to some dependencies. Who should I contact about this? I opened an issue here also but no clue how to deal with these types of issues: nodesource/distributions#1096

nodesource/distributions#1096 would be the best place to deal with this. The problem was already fixed a long time ago here.