I run npm audit
and I get a message assign-deep
has a vulnerability but it was fixed in 1.0.1
Unfortunately this is a transitive dependency. Is there a way to update this transitive dependency so it uses v1.0.1 ?
└─┬ update@0.7.4
└─┬ assemble-core@0.25.0
└─┬ templates@0.24.3
└─┬ engine-base@0.1.3
└─┬ engine@0.1.12
└── assign-deep@0.4.8