Merge pull request #449 from appearhere/feature/LFR-1572

LFR-1572 Fix security vulnerabilities

package.json

@@ -25,5 +25,31 @@
   },
   "dependencies": {
     "upath": "^1.0.5"
+  },
+  "resolutions": {
+    "js-yaml": "^3.13.1",
+    "braces": "^2.3.1",
+    "cryptiles": "^3.1.3",
+    "deep-extend": "^0.5.1",
+    "hoek":"^4.2.0",
+    "mixin-deep": "^1.3.2",
+    "set-value": "^2.0.1",
+    "fstream": "^1.0.12",
+    "handlebars": "^4.3.0",
+    "atob": "^2.1.0",
+    "lodash": "^4.7.12",
+    "url-parse": "^1.4.3",
+    "stringstream": "^0.0.6",
+    "merge": "^1.2.1",
+    "extend": "^2.0.2",
+    "tar": "^2.0.2",
+    "static-eval": "^2.0.2",
+    "debug": "^2.6.9",
+    "tough-cookie": "^2.3.3",
+    "no-case": "^2.3.2",
+    "is-my-json-valid": "^2.12.4",
+    "tunnel-agent": "^0.6.0",
+    "macaddress": "^0.2.9",
+    "webpack-dev-server": "^2.11.4"
   }
 }

packages/core/package.json

@@ -32,7 +32,7 @@
     "dedent": "^0.7.0",
     "file-loader": "^1.1.11",
     "key-mirror": "^1.0.1",
-    "lodash": "^4.16.3",
+    "lodash": "^4.17.12",
     "moment-range": "^3.1.1",
     "object-fit-images": "^3.2.3",
     "react-autosuggest": "^9.3.4",