Security issues NPM

[jozeflambrecht]

I installed this cool package , ran npm audit and this is the result:

  Moderate        Prototype Pollution                                           
                                                                                
  Package         jquery                                                        
                                                                                
  Patched in      >=3.4.0                                                       
                                                                                
  Dependency of   jquery.mobilephonenumber [dev]                                
                                                                                
  Path            jquery.mobilephonenumber > jquery                             
                                                                                
  More info       https://npmjs.com/advisories/796                              
                                                                                
                                                                                
  High            Cross-Site Scripting (XSS)                                    
                                                                                
  Package         jquery                                                        
                                                                                
  Patched in      >=3.0.0                                                       
                                                                                
  Dependency of   jquery.mobilephonenumber [dev]                                
                                                                                
  Path            jquery.mobilephonenumber > jquery                             
                                                                                
  More info       https://npmjs.com/advisories/328           

my package.json file:

...
        "jquery": "^3.4.1",
        "jquery.mobilephonenumber": "^1.0.7",
...

Any idea how this could be fixed?

[jozeflambrecht]

Is this "safe" to be used, despite the warnings? Thank you for the package!

[jozeflambrecht]

I found the latest version is v1.0.8 on github, but the latest version on npm is v1.0.7. Could you update the latest version on npm? Would that fix the warnings?

[jozeflambrecht]

Not supported anymore?