inquirer is currently stuck on ^6.3.1. This version includes external-editor which has a tmp vulnerability in it. Some of the newer versions of inquirer have resolved that problem. Are there any plans to upgrade to a newer version?
I know people don't normally use cz-customizable in a production like environment so this particular audit issue is generally a false positive when coming from it but we still usually have to do something to deal with it / quiet it or what not. So being able to install a "non-vulnerable" version at some point would be greatly appreciated.
Thanks.
inquirer is currently stuck on ^6.3.1. This version includes external-editor which has a tmp vulnerability in it. Some of the newer versions of inquirer have resolved that problem. Are there any plans to upgrade to a newer version?
I know people don't normally use cz-customizable in a production like environment so this particular audit issue is generally a false positive when coming from it but we still usually have to do something to deal with it / quiet it or what not. So being able to install a "non-vulnerable" version at some point would be greatly appreciated.
Thanks.