I am using latest package update@0.7.4. It's using vulnerable packages assign-deep and set-value. Please fix it and provide updates.
npm audit
High Prototype Pollution
Package assign-deep
Patched in >=1.0.1
Dependency of update [dev]
Path update > assemble-core > templates > template-error > engine > assign-deep
More info https://npmjs.com/advisories/1014
High Prototype Pollution
Package assign-deep
Patched in >=1.0.1
Dependency of update [dev]
Path update > assemble-core > templates > engine-base > engine > assign-deep
More info https://npmjs.com/advisories/1014
High Prototype Pollution
Package set-value
Patched in >=2.0.1 <3.0.0 || >=3.0.1
Dependency of update [dev]
Path update > common-config > question-cache > set-value
More info https://npmjs.com/advisories/1012
High Prototype Pollution
Package set-value
Patched in >=2.0.1 <3.0.0 || >=3.0.1
Dependency of update [dev]
Path update > base-questions > question-store > question-cache > set-value
More info https://npmjs.com/advisories/1012
I am using latest package
update@0.7.4. It's using vulnerable packagesassign-deepandset-value. Please fix it and provide updates.npm audit