Fix security vulnerability by upgrading lib

[dchambers]

Fixes CVE-2019-10747:

• https://nvd.nist.gov/vuln/detail/CVE-2019-10747

[RDIL]

@jonschlinkert this is urgent, please merge when you can

[finppp]

Please fix this
Thanks

[jonschlinkert]

Thanks for the PR, but this isn't necessary. 3.0.1 is automatically used by semver. I will merge when we have other changes to make on this library.

[dchambers]

Thanks for the PR, but this isn't necessary. 3.0.1 is automatically used by semver. I will merge when we have other changes to make on this library.

Agree that for new installs this will normally be the practical upshot, but I think security tooling will continue to see potential risks since there will always be edge cases (depending on your setup) where this may not happen in practice.

That said, I personally can live with ignoring the security warnings for a while longer 👍

[finppp]

Looks like the chain that was following linked to this package/pr: jonschlinkert/cache-base#12

Thanks for getting back to me though!
Finlay