From d40d463e3f4655504eb4d5c7e07c87d1584c683d Mon Sep 17 00:00:00 2001 From: cueedee <cueedee@users.noreply.github.com> Date: Thu, 7 Dec 2017 09:37:33 +0100 Subject: [PATCH] chore(project): exclude vulnerable `moment` versions from dependency range https://nodesecurity.io/advisories/532 --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index b1274df..f4b5db1 100644 --- a/package.json +++ b/package.json @@ -13,7 +13,7 @@ "madlib-console": "^0.1.4", "madlib-settings": "^0.1.7", "madlib-xhr": "^0.1.21", - "moment": "<3", + "moment": ">=2.19.3 <3", "node-polyglot": "<3", "q": "^1.5.1", "underscore": "^1.8.3",