xml2js pin is to a version with a security vulnearbility #14
Description
Describe the bug
The pinned version of xml2js is vulnerable to this vulnerability which dependabot will flag.
To Reproduce
Steps to reproduce the behavior:
- Install podcast-feed-parser
- Enable dependabot
Expected behavior
Upgrade to >0.5.0