semver@6.3.0 Vulnerability within nyc@15.1.0

[rlerma]

Is this repo still being maintained?

nyc has the following dependency tree based on semver

nyc@15.1.0
├─┬ istanbul-lib-instrument@4.0.3
│ ├─┬ @babel/core@7.19.0
│ │ ├─┬ @babel/helper-compilation-targets@7.19.0
│ │ │ └── semver@6.3.0
│ │ └── semver@6.3.0
│ └── semver@6.3.0
└─┬ make-dir@3.1.0
└── semver@6.3.0

semver@<7.5.2 has a vulnerability
GHSA-c2qf-rxjj-qqgw

[rcmedeiros]

No response? 👀

[AxxlFoley]

I also need a fix .. any update ?

[TheJHay]

@coreyfarrell are you able to comment if this repo is still maintained?

[jaws97]

Did anyone find any alternative?

[AxxlFoley]

@jaws97 After realizing that nyc is not really maintained any longer, our project switched to C8
https://github.com/bcoe/c8