Dependencies should be pinned to exact versions #48
Description
The application contained multiple dependencies that were not pinned to an exact version, but they were set
to a supported version (ˆx.x.x). This could potentially allow dependency attacks.
Recommendation
The repository dependencies in the package.json files should be pinned to exact versions to prevent
dependency attacks.