Axios vulnerability

[KahtiD]

Hi,

Theres a vulnerability with axios, a dependency of the timekitsdk and I've been trying to update it to the fixed version of 0.19.0 but it seems to not be doing the trick.

Thinking maybe something that needs to be fixed on your guys side of things?

I'm a newbie to this so apologies if there is a fix I can't see.

[Weffe]

This would have to be fixed on their side.

If you use yarn instead of npm, then you could maybe use selective version resolutions. Then in your package.json it could look like this to force the axios dependency that timekit-sdk tries to install be v0.19.0

{
  "name": "YourProjectName",
  "version": "1.0.0",
  "dependencies": {
    "timekit-sdk": "1.18.1"
  },
  "resolutions": {
    "timekit-sdk/axios": "0.19.0"
  }
}