Dependencies don't seem to have updated on npm or yarn

[101614855]

lodash which has been update to version 14.17.12 in this repo does not seem to be pulled through when pulling from npm or yarn. Both package managers still pull in lodash 14.17.11 for some reason

[stevenjoezhang]

+1 Need to release a new version and publish to npm

[fam4r]

Someone can please explain why that happens?

[h0ek]

sudo npm audit === npm audit security report === Manual Review Some vulnerabilities require your attention to resolve Visit https://go.npm.me/audit-guide for additional guidance High Prototype Pollution Package lodash Patched in >=4.17.12 Dependency of hexo-generator-seo-friendly-sitemap Path hexo-generator-seo-friendly-sitemap > lodash More info https://npmjs.com/advisories/1065

sudo npm list lodash [email protected] /home/blablabalabla ├─┬ [email protected] │ ├── [email protected] deduped │ └─┬ [email protected] │ └── [email protected] deduped ├─┬ [email protected] │ └── [email protected] └── [email protected]

[fam4r]

@ludoviclefevre any update on that?

[ishaanx]

Bump. @ludoviclefevre

[h0ek]

looks like this repo and project is dead :( time to find other sitemap generator