dependency shell-quote CVE-2021-42740

[robmaas]

Please upgrade npm package shell-quote to 1.7.3+ to patch GHSA-g4rg-993r-mgx7

[Etheryte]

Until the package gets updated, you can use Yarn's resolutions or npm's overrides to override the dependency. For example for Yarn:

{
  "devDependencies": {
    "npm-run-all": "4.1.5"
  },
  "resolutions": {
    "shell-quote": "1.7.3"
  }
}