Current version has severe vulnerabilites due to Lodash prototype pollution

[willissa2121]

Could you please update your lodash version to 4.17.15 or newer. NPM audit is part of out build process so we are not successfully able to deploy.

[sethetter]

Any updates here? Is this package still maintained?

[mifi]

lodash is already specified as semver with a caret:

NestHydrationJS/package.json

Line 26 in 36ccd86

"lodash.isarray": "^4.0.0",

so the consuming project should automatically install 4.17.15 or newer according to semver.

btw an alternative package to this is https://github.com/kwhitley/treeize