Create a new stable version about caporal.js

[hwinkler]

Caporal released on npm has become a significant security risk, through its dependencies. snyk test reports many high sev issues in lodash, chalk, ansi-regex... maybe others.

We do need a new build, please, with updated dependencies.

Additionally, please consider using ^ in the semver for the dependencies, so that you won't need to kick out a new build every time they discover a vulnerability in one of the dependencies.

Thank you for Caporal!

[mattallty]

I'm working on it - CI is currently broken so that's a blocker but I'm gonna spend some time to fix it this weekend

[VasiliDarozhkin]

@mattallty Would that be possible? Thank you!

[waheedahmed]

Same issue with us as well, any chance we get a new version? Thanks!

[mattallty]

@VasiliDarozhkin @hwinkler if you still use this package, please try installing @caporal/core@next and tell me if it's working well for you, thanks !

[mattallty]

3.0 has been released with updated deps: https://www.npmjs.com/package/@caporal/core