High risk vulnerability in dependencies

[gabor-at-reed]

Hi there,

Currently, npm audit marks this package as high risk one, because one of this dependency has "Remote Memory Exposure" risk.

  High            Remote Memory Exposure

  Package         bl

  Dependency of   brotli-webpack-plugin [dev]

  Path            brotli-webpack-plugin > iltorb > prebuild-install > tar-fs >
                  tar-stream > bl

  More info       https://npmjs.com/advisories/1555

[sayjeyhi]

@mynameiswhm could you update the package?

[brionmario]

It would be better if itorb could be removed. There is a vulnerability in rc package which is a transitive dependency of itorb. I see a PR that had been already sent to remove the dependency. Better if that could be merged.

[brionmario]

Since the plugin seems to be abandoned, I followed the official documentation and migrated to the compression-webpack-plugin for Brotli compression.

https://webpack.js.org/plugins/compression-webpack-plugin/#using-brotli