Resolve npm package vulnerabilities
- Ran npm audit fix and resolved all high priority security
vulnerabilities.
- One low risk vulnerability remains. This is a yargs package that may
require updating other packages.
- Lodash required an update since it was a high servirity issue that
was exposed in the application's functionality beyond the build script
and tools
Signed-off-by: Derick Montague <derick.montague@ibm.com>
Change-Id: If67fe5939c6ab69767bdc046168985078a19aa30
diff --git a/package.json b/package.json
index 9942f12..115937b 100644
--- a/package.json
+++ b/package.json
@@ -21,7 +21,7 @@
"bootstrap-vue": "2.12.0",
"core-js": "3.3.2",
"js-cookie": "2.2.1",
- "lodash": "4.17.15",
+ "lodash": "4.17.19",
"vue": "2.6.11",
"vue-i18n": "8.15.3",
"vue-router": "3.1.3",
@@ -49,7 +49,7 @@
"eslint-plugin-prettier": "3.1.1",
"eslint-plugin-vue": "5.0.0",
"lint-staged": "9.4.2",
- "node-sass": "4.13.1",
+ "node-sass": "4.14.1",
"prettier": "1.18.2",
"sass-loader": "8.0.0",
"vue-cli-plugin-i18n": "0.6.1",