The version of moment.js is use has a known CVE logged against it. [CVE-2017-18214](https://nvd.nist.gov/vuln/detail/CVE-2017-18214) Willing to help submit a PR, in the process of exploring how to fix the issue. I have no experience with Golang at all.