Replace esdoc with esdoc-next

[otherguy]

Hi! The optional esdoc dependency is outdated and causes security warnings with yarn audit, breaking our CI. Unfortunately yarn add --no-optional is still broken so esdoc gets installed no matter what.

Unfortunately, 0.5.2 was the last version before 1.0.1, and you have specified escoc: ^0.5.2, so that effectively pins it at 0.5.2.

Could you please update esdoc to the latest version? Actually 1.1.0 still pulls in the old, outdates sub-dependencies.

Can esdoc be replaced with esdoc-next?

$ yarn audit
yarn audit v1.22.10
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ high          │ Regular Expression Denial of Service                         │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ marked                                                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=0.3.9                                                      │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ danger-plugin-code-coverage                                  │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ danger-plugin-code-coverage > esdoc > marked                 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/531                         │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ low           │ Prototype Pollution                                          │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ minimist                                                     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=0.2.1 <1.0.0 || >=1.2.3                                    │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ danger-plugin-code-coverage                                  │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ danger-plugin-code-coverage > esdoc > minimist               │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1179                        │
└───────────────┴──────────────────────────────────────────────────────────────┘
2 vulnerabilities found - Packages audited: 1353
Severity: 1 Low | 1 High
✨  Done in 2.37s.

[Spoutnik97]

Yes, sure! In fact I can remove it totally 😉

[Spoutnik97]

@otherguy I updated it in the version 1.1.6 you can find on NPM

[otherguy]

Nice, thank you 👍