Force lodash resolution to higher patch version

This forces our dependencies to use a version of lodash that includes a fix for this vulnerability: https://snyk.io/vuln/SNYK-JS-LODASH-73638
2019-07-15 11:16:57 -04:00
parent 951845ca86
commit 55cc774666
2 changed files with 7 additions and 4 deletions
--- a/package.json
+++ b/package.json
@@ -39,6 +39,9 @@
    "prettier": "^1.16.1",
    "vue-template-compiler": "2.5.15"
  },
+  "resolutions": {
+    "parcel-bundler/**/lodash": "^4.17.13"
+  },
  "browserslist": [
    "last 3 version",
    "> 5%",