Memory leak in inflight dependency

[rahmanfasalu]

Version-2.1.4 is using a dependency of glob "^7.1.6," which has a transient dependency, "inflight," that has a memory leak. maybe updating glob to the latest version might fix the issue

ref: isaacs/inflight-DEPRECATED-DO-NOT-USE#18

[Uniphix]

This is breaking our product sadly. Is there a reason why it is taking forever to update?

[MikeMcC399]

This is reported as a security vulnerability in https://security.snyk.io/vuln/SNYK-JS-INFLIGHT-6095116
Missing Release of Resource after Effective Lifetime

Also

$ npm view inflight deprecated
This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.

node-glob@9.0.0 removed the dependency on inflight last published in the year 2016.

dot-object/package.json

Line 61 in a95a7fc

"glob": "^7.1.6"

[MikeMcC399]

Also

$ npm view glob@7.1.6 deprecated
Glob versions prior to v9 are no longer supported
$ npm view glob@7.2.3 deprecated
Glob versions prior to v9 are no longer supported