Relies (transitively) on vulnerable version of inflight

[thetumper]

Seems that inflight is not expected to be fixed (see this comment). So, the upstream libs using it should fix by updating to later versions of the in between dependency (glob).

For my app, the dependency chain starts with pino-pretty, but this help-me lib would be the point of upgrading to newer version of glob to resolve:

[email protected] › [email protected] › [email protected] › [email protected]

The Snyk issue, for reference:
https://security.snyk.io/vuln/SNYK-JS-INFLIGHT-6095116

[mcollina]

Would you like to send a PR to address this issue?

[thetumper]

Added a PR:

#18

One unit test is skipped temporarily, until I have time to figure out what's going wrong....

[thetumper]

Added a PR:

#18

One unit test is skipped temporarily, until I have time to figure out what's going wrong....

Resolved the unit test. @mcollina Please have a look. Thanks!

[rreeves8]

Can we get this merged ? Needed for Pino fix

[mcollina]

unit tests are still not passing. Will take a look asap.