High Severity Dependency

[sklawren]

This library has a high severity dependency (underscore 1.6.0).

└─┬ eslint-plugin-i18n-json@3.1.0
  └─┬ jsonlint@1.6.3
    └─┬ nomnom@1.8.1
      └── underscore@1.6.0

I did some digging. nomnom has been deprecated and jsonlint has been abandoned for a long time (there are 409 forks). An open PR has resolved this issue.

The code of jsonlint is actually pretty simple. You could probably include it yourself internally so you don't have an insecure dependency out of your control which has long since been abandoned.