Upgrade nodemon dependency to 1.18.7 to remove event-stream vulnerability

[pracucci]

As you're probably aware, event-stream ownership has been unintentionally transferred to a malicious user who injected a vulnerability in it.

npm-watch depends on nodemon ^1.12.1, which depends on event-stream. Few hours ago, nodemon released v.1.18.7 which completely remove the dependency from pstree and subsequently from event-stream.

Is there any chance to upgrade to nodemon 1.18.7, to completely remove event-stream from npm-watch as well? Thanks!

[pracucci]

Thanks @M-Zuber and @mfolkeseth !

[M-Zuber]

Thank you for bringing it to my attention, I am publishing a new release now

[mfolkeseth]

Wow, that was quick @M-Zuber! Thanks 👍