ramda dependency suffers from security vulnerability

[slobo80]

Current version of ramda referenced in package.json has a security vulnerability CWE-915

Problem description:

Suggested solution:

The problem has been fixed in ramda 0.27.1. We should upgrade it to the latest compatible version.

Can you help us fix this issue by submitting a pull request?

I would love to submit a PR with a fix, but currently I'm blocked on tests failing in main branch. Once that issue has been resolved I will submit the fix

[dbolkensteyn]

@slobo80 Which tool reported this vulnerability?

[slobo80]

@slobo80 Which tool reported this vulnerability?

It is https://github.com/microsoft/component-detection

[mdjastrzebski]

Merged Ramda update to 0.28 with #79