grunt-ftp-deploy 0.2.0 requires a version of minimatch that is affected by this vulnerability: https://nvd.nist.gov/vuln/detail/CVE-2016-10540 And a version of lodash with these vulnerabilities: * https://nvd.nist.gov/vuln/detail/CVE-2019-1010266 * https://nvd.nist.gov/vuln/detail/CVE-2018-16487 * https://nvd.nist.gov/vuln/detail/CVE-2018-3721