Multiple vulnerabilities in citgm@ (`latest`)

[MikeMcC399]

Current situation

npm audit on citgm@10.0.2 reports:

32 vulnerabilities (1 low, 6 moderate, 24 high, 1 critical)

Expected

Minimal vulnerabilities when installing citgm

Steps to reproduce

Ubuntu 24.04.4 LTS, Node.js 24.20.0

cd $(mktemp -d)
npm install citgm
npm audit

32 vulnerabilities (1 low, 6 moderate, 24 high, 1 critical)

Suggestion

Cut a new release of citgm

Although the tag v10.0.2 exhibits:

32 vulnerabilities (1 low, 6 moderate, 24 high, 1 critical)

the main branch shows only:

5 high severity vulnerabilities

and executing an update command, using also min-release-age to protect against undetected supply-chain issues in brand new packages, removes all currently reported vulnerabilities:

npm update --save --min-release-age=7

[MikeMcC399]

This issue would be addressed by #1135, which updates dependencies also to their latest major versions.
A release that included the changes would also be needed.