Is there a plan to address vm2 critical security vulnerability for npm

[poojakharel]

I see there was an attempt to fix it for yarn but I still see the vulnerability for npm install, is there a plan to address it soon in future? I want to use it for one of the projects and am kinda blocked by it.

[sswayney]

There is a finished PR but we need a release. :/

#1021

[juandav]

The last added changes have been released.