Dependencies (micromatch) Security Vulnerabilities

[michal-ayash]

This package requires an old version of 'micromatch' (3.1.10) that requires 'set-value' with old version (2.0.0) which has vulnerability issue.
Updating the package to require the latest version of micromatch will resolve the issue.

Thanks,
Michal.

[gingerchris]

I made an attempt at this here #645
But it would need this project to effectively abandon support for node 7.

What is the feeling around that?