[FLAGON-423] Update Package File to Fix Down Stream Dependencies

• Type: Sub-task
• Status: Closed
• Priority: Blocker
• Resolution: Fixed
• Affects Version/s: UserALE.js 2.0.2
• Fix Version/s: UserALE.js 2.0.2
• Component/s: UserALE.js
• Environment: node.js
• Flags: Patch, Important
• Assignee: Joshua Poore
• Reporter: Joshua Poore
• Due: 25/Jul/19
• Created: 26/Jul/19 01:26
• Updated: 06/Aug/19 01:54
• Resolved: 06/Aug/19 01:54

Description

Because the Prototype Pollution vulnerability is so pervasive, npm is rolling back their "immutable" registry policy to allow for fixes to previous versions of ubiquitous dependencies (set-value, mixit, lodash). These fixes will bubble up to existing versions of major userale.js dev dependencies (gulp, nodemon, babel, etc., etc.). However, as the registry will accept changes to prior versions of dependencies, the hashes on these dependencies will change. This requires that we regenerate our package.json file. 

Issue Links

• is a child of: FLAGON-422 Update NPM modules to fix prototype pollution issues in npm packages