Add resolutions for polluted packages

for yarn users: Just `yarn install` then vulnerabilities are fixed! for npm users: Wait for support of 'resolutions' from npm.
2019-06-04 23:06:30 +09:00 · 2019-06-04 23:06:30 +09:00 · a8ff1e19dc
parent d559aa8e6d
commit a8ff1e19dc
1 changed files with 4 additions and 0 deletions
--- a/package.json
+++ b/package.json
@ -25,6 +25,10 @@
 		"test": "gulp test",
 		"format": "gulp format"
 	},
+	"resolutions": {
+		"gulp-cssnano/cssnano/postcss-svgo/svgo/js-yaml": "^3.13.1",
+		"video-thumbnail-generator/lodash": "^4.17.11"
+	},
 	"dependencies": {
 		"@elastic/elasticsearch": "7.0.0-rc.2",
 		"@fortawesome/fontawesome-svg-core": "1.2.15",