Merge pull request #23 from phil-lgr/fix-lodash-vulnerability

aputinski · web-flow · commit f66c21a422ee · 2019-01-16T09:35:57.000-08:00
bump lodash version
diff --git a/.gitignore b/.gitignore
@@ -1,3 +1,4 @@
 dist
+package-lock.json
 node_modules
 *.log
diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "scss-parser",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "A library to parse/stringify SCSS",
   "main": "lib/index.js",
   "license": "SEE LICENSE IN README",
@@ -20,7 +20,7 @@
   },
   "dependencies": {
     "invariant": "2.2.2",
-    "lodash": "4.17.4"
+    "lodash": "^4.17.4"
   },
   "devDependencies": {
     "jest": "20.0.4",

-Original file line number
+Diff line change
@@ @@ -1,3 +1,4 @@ @@
 dist
 +package-lock.json
 node_modules
 *.log