global-prefix
global-prefix copied to clipboard
Bump version kind-of to 6.0.3 to fix CVE-2019-20149
Description
Due to CVE-2019-20149, a new version of kind-of has been released.
Since global-prefix uses 6.0.2, this raises security flags.
Thanks for the PR, but this isn't necessary right now. 6.0.3 will automatically be used due to the semver range. When other changes are made to this package, we'll merge it in at that time.
I've ensured ^6.0.3 is specified in the v4.0.0 release.