[FLAGON-430] update rollup-plugin-license

• Type: Task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: UserALE.js 2.0.2
• Fix Version/s: UserALE.js 2.0.2
• Component/s: UserALE.js
• Environment: node.js
• Flags: Patch
• Assignee: Joshua Poore
• Reporter: Joshua Poore
• Created: 26/Jul/19 02:10
• Updated: 06/Aug/19 01:58
• Resolved: 06/Aug/19 01:58

Description

We have one remaining Prototype Pollution vulnerability in dev dependencies for builds. rollup-plugin-license needs to update to latest lodash patch version. I have opened a ticket on their boards. https://github.com/mjeanroy/rollup-plugin-license/issues/422. Will patch when new patch version is available.