cosmiconfig 8.x version giving License Risk -> High for blackduck scan #862
Description
Current behavior
cosmiconfig 8.x version is giving a high-risk License issue in the BlackDuck scan.
PFA
Expected behavior
The latest version of cosmiconfig is 9.0.0, so updating it to the latest version might solve the issue of the BlackDuck scan. Or it should not give a vulnerability issue for the cosmiconfig dependency.
Steps to reproduce the issue
Install fork-ts-checker-webpack-plugin and scan it through BlackDuck scan or any scanner that gives you vulnerability issues.
Issue reproduction repository
NA
Environment
- fork-ts-checker-webpack-plugin: [9.1.0 from the
package.json] - typescript: [5.0 from the
package.json] - eslint: [7.32.0 from the
package.json] - webpack: NA
- vite: 4.5.5
- os: [Ubuntu 22.04.4 LTs]