Upgrade mkdirp due to vulnerability in old version

[Prophet32j]

Trying to work back through each node module for bunyan to fix a vulnerability.

[email protected] has a vulnerable package [email protected] which needs to be fixed. Updating to the latest version of mkdirp will completely remove minimist from the dependency tree.

Here's the CVE: https://nvd.nist.gov/vuln/detail/CVE-2020-7598

This library hasn't had any movement on it for quite a long time. If it's dead, say it's dead so I can discuss this with the maintainers of bunyan

[Prophet32j]

Opened an issue on bunyan logger to address this issue too.

[Prophet32j]

@andrewrk are you not maintaining this project anymore?

[jasonnutter]

[email protected] uses [email protected], so I think this is resolved by regenerating your lock file.