vulnerability in mocha 3.x

[caa1211]

Because the latest mocha in 3.x (v3.5.3) has vulnerability in dependency of grow 1.9.2

Mocha Vulnerability Issue:
https://github.com/mochajs/mocha/issues/2791

Mocha 3.5.3 dependency
https://github.com/mochajs/mocha/blob/v3.5.3/package.json

Could you please help to upgrade mocha to 4.x version or give some suggestions? thanks your contributions.

[asztal]

Presumably mocha should be a peerDependency rather than an actual dependency. mocha-junit-reporter does this so I assume it's not a problem.

[apupier]

Current Mocha versions supported are 5.2+ so Mocha 3.x vulnerability is not visible

[juhovh]

Thank you for the comment, I'm closing this old ticket.