fix: lock down packageurl-js version

[email protected] is the latest version that still allows percent-encuded "+" signs in purl versions
snyk · Dec 29, 2023 · b31ee12 · b31ee12
1 parent b460b6c
commit b31ee12
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/package.json b/package.json
@@ -64,7 +64,7 @@
     "lodash.union": "^4.6.0",
     "lodash.values": "^4.3.0",
     "object-hash": "^3.0.0",
-    "packageurl-js": "^1.0.0",
+    "packageurl-js": "1.2.0",
     "semver": "^7.0.0",
     "tslib": "^2"
   }