Not fixing vulnerability of [email protected]

[huksley]

See details here
huksley/todo-react-ssr-serverless#7

[rogeriochaves]

sorry, but I have to be honest with you, I don't have time to fix this now, as it might be the case that npm rules for reading the package-lock changed recently and trying to figure out a way to trick npm to force a version might take a while

but if you have time to investigate this better and detail your findings here, or even send a pull request, that would be great

[wurmr]

I bet this is due to the fact that running npm i now updates the package.lock and undoes the work of this package. #3