vulnerability CVE-2020-7598 is introduced by package minimist

[paimon0715]

Hi, a vulnerability CVE-2020-7598 is introduced in [email protected] via:
[email protected] ➔ [email protected] ➔ [email protected].

However, optimist is a legacy package, which has not been maintained for about 8 years.
Is it possible to migrate optimist to other package to remediate this vulnerability?

I noticed several migration records in other js repo for optimist:

1. in handlebars, version 4.7.3-->4.7.4, migrate optimist to yargs via commit
2. in db-migrate, version 1.0.0-beta.2-->1.0.0-beta.3, migrate optimist to yargs via commit
3. in http-server, version 0.12.1-->0.12.2, deprecated optimist and directly use minimist via commit

Thanks.

[coreybutler]

Duplicate of #273.

[paimon0715]

@coreybutler Just noticed that. Thanks.
This issue has been fixed via #267