I can approve this. +1

It still seems to be a problem on 1.12.0 according to Snyk (https://app.snyk.io/test/npm/vorpal/1.12.0).

I'm pretty sure this project is dead, @Berkmann18.

@johncblandii I hope not. @dthree ?

Why has this not been merged, rather unacceptable that a high security vulnerability has been here for over a year

@tsujp Because the project is dead and the old vorpal admins haven’t put anyone else in charge.

@slinkardbrandon I guess either https://github.com/vorpaljs-reforged/vorpal or https://github.com/oclif/oclif is the play now.

I'm starting using this fork: npm i @moleculer/vorpal