Fix CVE-2021-23566 in nanoid before 3.1.31, closes #219 (#220)

* CVE-2021-23566 in nanoid before 3.1.31 * Use the new import form
DevExpress · Jan 24, 2022 · 7c19967 · 7c19967
1 parent 2754e64
commit 7c19967
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/package.json b/package.json
@@ -25,7 +25,7 @@
     "lodash": "^4.17.15",
     "mkdirp": "^0.5.1",
     "mustache": "^2.1.2",
-    "nanoid": "^2.1.3",
+    "nanoid": "^3.1.31",
     "os-family": "^1.0.0",
     "pify": "^2.3.0",
     "pinkie": "^2.0.1",

diff --git a/src/utils/exec.js b/src/utils/exec.js
@@ -6,7 +6,7 @@ import del from 'del';
 import execa from 'execa';
 import { ensureDir, pathExists, copy } from 'fs-extra';
 import OS from 'os-family';
-import nanoid from 'nanoid';
+import { nanoid } from 'nanoid';
 import promisify from './promisify';
 import BINARIES from '../binaries';
 import flattenWhitespace from './flatten-whitespace';