Add resolutions for polluted packages
for yarn users: Just `yarn install` then vulnerabilities are fixed! for npm users: Wait for support of 'resolutions' from npm.
This commit is contained in:
parent
fc17f07726
commit
5bf561b513
1 changed files with 4 additions and 0 deletions
|
@ -25,6 +25,10 @@
|
|||
"test": "gulp test",
|
||||
"format": "gulp format"
|
||||
},
|
||||
"resolutions": {
|
||||
"gulp-cssnano/cssnano/postcss-svgo/svgo/js-yaml": "^3.13.1",
|
||||
"video-thumbnail-generator/lodash": "^4.17.11"
|
||||
},
|
||||
"dependencies": {
|
||||
"@elastic/elasticsearch": "7.0.0-rc.2",
|
||||
"@fortawesome/fontawesome-svg-core": "1.2.15",
|
||||
|
|
Loading…
Reference in a new issue