Update lodash for prototype pollution vulnerability

lodash/lodash#4336
mearns · Jul 11, 2019 · 7ca8be2 · 7ca8be2
1 parent 6685161
commit 7ca8be2
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 5 deletions.
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "tracking-promise",
-  "version": "1.0.0",
+  "version": "1.0.0-dev",
   "description": "A JavaScript library for tracking the success/failure of a promise without rejecting",
   "keywords": [
     "promise",
@@ -54,6 +54,7 @@
     "eslint-plugin-promise": "^4.1.1",
     "eslint-plugin-standard": "^4.0.0",
     "husky": "^2.3.0",
+    "lodash": ">=4.17.14",
     "mocha": "^6.1.4",
     "mochawesome": "^4.0.1",
     "node": "^10.9.0",