build(deps): upgrade mkdirp to 0.5.4 for security

This is actually a security issue in minimist, which is not actually used in this module. This module only uses the API of mkdirp, not the CLI (which is where minimist is used). So this is really a red herring. Closes #85. Closes #86.
max-mapper · Mar 24, 2020 · 30ab06c · 30ab06c
1 parent 2b2a84e
commit 30ab06c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/package.json b/package.json
@@ -20,7 +20,7 @@
   "dependencies": {
     "concat-stream": "1.6.2",
     "debug": "2.6.9",
-    "mkdirp": "0.5.1",
+    "mkdirp": "0.5.4",
     "yauzl": "2.4.1"
   },
   "devDependencies": {