Merge pull request #101 from sphereio/95-update-insecure-deps

fix(deps): update insecure dependencies
commercetools · Jun 3, 2020 · d7beb1d · d7beb1d
2 parents 7d86589 + 7c5b4d9
commit d7beb1d
Show file tree

Hide file tree

Showing 2 changed files with 120 additions and 24 deletions.
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -35,6 +35,7 @@
     "node": ">= 8.0.0"
   },
   "scripts": {
+    "preinstall": "npx npm-force-resolutions",
     "build": "grunt build",
     "test": "grunt test",
     "coverage": "grunt coverage",
@@ -43,7 +44,7 @@
   "dependencies": {
     "bluebird": "^3.0.0",
     "bunyan-logentries": "^1.0.0",
-    "csv": "^1.1.0",
+    "csv": "^1.2.0",
     "debug": "^4.1.0",
     "optimist": "^0.6.1",
     "sphere-node-sdk": "^3.0.1",
@@ -52,7 +53,11 @@
     "underscore": "^1.8.3",
     "xml2js": "^0.4.9"
   },
+  "resolutions": {
+    "lodash": "^4.17.15"
+  },
   "devDependencies": {
+    "npm-force-resolutions": "0.0.3",
     "coffee-script": "^1.12.7",
     "coveralls": "^3.0.2",
     "grunt": "^1.0.3",