vulnerabilities fix

[akoushke]

bl dependency needs to be updated please. Let me know If you want me to open a PR for it.

[vweevers]

We removed bl in #674, will release soon. Thanks for the report!

[akoushke]

@vweevers thanks for the reply. would this be a path/minor update? it looks like the version had not been updated. do you plan to override the npm lib?

[vweevers]

Next release will be semver-patch.

it looks like the version had not been updated. do you plan to override the npm lib?

Not sure what you mean.

It doesn't really matter though, bl is/was only a devDependency.

[akoushke]

Okay got it.