Add resolutions for polluted packages
for yarn users: Just `yarn install` then vulnerabilities are fixed! for npm users: Wait for support of 'resolutions' from npm.
This commit is contained in:
parent
d559aa8e6d
commit
a8ff1e19dc
@ -25,6 +25,10 @@
|
|||||||
"test": "gulp test",
|
"test": "gulp test",
|
||||||
"format": "gulp format"
|
"format": "gulp format"
|
||||||
},
|
},
|
||||||
|
"resolutions": {
|
||||||
|
"gulp-cssnano/cssnano/postcss-svgo/svgo/js-yaml": "^3.13.1",
|
||||||
|
"video-thumbnail-generator/lodash": "^4.17.11"
|
||||||
|
},
|
||||||
"dependencies": {
|
"dependencies": {
|
||||||
"@elastic/elasticsearch": "7.0.0-rc.2",
|
"@elastic/elasticsearch": "7.0.0-rc.2",
|
||||||
"@fortawesome/fontawesome-svg-core": "1.2.15",
|
"@fortawesome/fontawesome-svg-core": "1.2.15",
|
||||||
|
Loading…
Reference in New Issue
Block a user