Cut a new patch release?

[marques-work]

@dtabuenc you've included a number of vulnerability updates (e.g., lodash ^4.17.13 to address CVE-2019-10744). I'm certain other projects that depend on karma-html-reporter are getting flagged for these vulnerabilities due to transitive dependencies. Would you be able to cut a patch release (v0.2.8)?

[marques-work]

For anyone trying to get around this until a new release is cut, you can add this to your package.json your security warnings should go away:

"devDependencies": {
    "karma-html-reporter": "https://github.com/dtabuenc/karma-html-reporter.git#51ba3f91a6f19ef383c676431aa7f8c3fa73dab3",
}

[MikeMatusz]

@dtabuenc Any updates?

[CharlotteZheng]

Any updates?