Update dependency lodash

[icodeforlove]

Related to the following issue

https://nodesecurity.io/advisories/577

[icodeforlove]

Seems like its updated in the repo, but the published version on NPM under 0.2.0 has the following dependencies.

  "dependencies": {
    "colors": "^1.1.2",
    "lodash": "^3.10.1",
    "string-width": "^1.0.1"
  }

Seems like the last NPM version update was in 2016, would make sense to just bump it with the recent updates to 0.2.1.

[tiberiumihai]

After ~6 months, is there any update on this?

[tiberiumihai]

Added PR here: https://github.com/jamestalmage/cli-table2/pull/54

Can someone take a look on this and publish the new version to npm?

[tiberiumihai]

Until this is merged and published in npm feed, you can use npm shrinkwrap to force install nested dependency of lodash as latest version 4.17.11:

"devDependencies": {
  "@nestjs/cli": {
      "version": "^5.7.1",
      "from": "@nestjs/cli@^5.7.1",
      "dependencies": {
        "cli-table2": {
          "version": "^0.2.0",
          "from": "cli-table2@^0.2.0",
          "dependencies": {
            "lodash": {
              "version": "4.17.11",
              "from": "lodash@^3.10.1"
            }
          }
        }
      }
    },
}