Peer dependency vulnerability

[ejsmith03]

Running npm audit results in the following dependency vulnerability:

Is anyone able to give an update on whether this is being looked into? This is non-breaking for me, and I understand that 3rd party packages might not have releases to remove such warnings, but this is creating a lot of noise for my project.

Any insight would be much appreciated!

[kuceb]

I'll accept a PR, but this plugin doesn't use ally.js in a way where the vuln can be exploited.