Dependency update needed to address nomalize-url CVE-2021-33502

[arborrow]

Below are the current packages and available versions in parentheses related to CVE-2021-33502

[email protected]
│ └─┬ [email protected]
│ └─┬ [email protected]
│ └─┬ [email protected] (8.0.0)
│ └─┬ [email protected] (11.8.2)
│ └─┬ [email protected] (7.0.2)
│ └── [email protected] (6.0.1)

Looks like download (and bin-wrapper) may be where updates are lagging which are packages contributed by @kevva as referenced in #63. So it may be best to eliminate dependence upon bin-wrapper and look for an alternative.

[hkjeffchan]

Maintained a forked version at https://github.com/hkjeffchan/imagemin-mozjpeg/ if you are interested

• Support CJS
• Updated dependency
• No binary shipped and you can specify your binary path