Vulnerability in Minimist

[shawnemhe]

Npm audit is finding a vulnerability in the minimist package. This is coming through as a dependency of optimist. That package currently has a deprecation notice and is not likely to be updated. The package owner recommends using minimist directly, or nomnom.

Are there any efforts planned that would remediate this vulnerability?

[DevRCRun]

Snyk is flagging this for us too. There are some pull requests open to resolve, might be an idea to vote on the one you agree with

#267
#263

[shawnemhe]

@DevRCRun, I'll take a look at the PRs.

[coreybutler]

#267 is the one I will merge once it has been tested.

[seidhkona]

Any plans on merging this anytime soon? Thanks!

[coreybutler]

Resolved with PR #267.