When I went to run npm install shadcn-ui, I ran into an issue where lodash.template would cause two high severity vulnerabilities after installation. Previously, when fixing this issue I would refer to this fix here where I would edit the lodash.template in the package.json to lodash-es, and npm audit would show no high severity vulnerabilities.
The problem is that it seems like recently shadcn-ui changed their download page, and my current react project is running off of those more recent instructions, so when I look there is no lodash to edit in the package.json anymore.
Manually adding “lodash-es”: “^4.17.21” in the package.json did not fix the issue. Is there an alternative way of addressing this?
user26397019 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.