[`ora`](https://www.npmjs.com/package/ora) dependency introduces deep unsafe dependency `ansi-regex@2.1.1`: ``` ttag-cli@1.10.10 › ora@1.3.0 › chalk@1.1.3 › has-ansi@2.0.0 › ansi-regex@2.1.1 ``` https://nvd.nist.gov/vuln/detail/CVE-2021-3807 https://security.snyk.io/vuln/SNYK-JS-ANSIREGEX-1583908 This would likely be fixed by uprading `ora` which seems like it could be easy enough given the simple use?
oradependency introduces deep unsafe dependencyansi-regex@2.1.1:https://nvd.nist.gov/vuln/detail/CVE-2021-3807
https://security.snyk.io/vuln/SNYK-JS-ANSIREGEX-1583908
This would likely be fixed by uprading
orawhich seems like it could be easy enough given the simple use?