Security vulnerability in mem dependency

[Harmon758]

The version of yargs being used has a mem dependency with a security vulnerability:
sindresorhus/memoize#14 (Fixed with sindresorhus/memoize@da4e439 / sindresorhus/memoize#19)
sindresorhus/os-locale#31
yargs/yargs#1209 (Fixed with yargs>=12.0.2: yargs/yargs@efc0970 / yargs/yargs#1195)

Dependency hierarchy:

`-- idyll@4.5.3
  `-- yargs@8.0.1
    `-- os-locale@2.1.0
      `-- mem@1.1.0

idyll/packages/idyll-cli/package.json

Line 73 in 43ac3aa

"yargs": "8.0.1"

GitHub has recently started creating security alerts for this vulnerability:

[mathisonian]

I haven't seen a security alert for this yet - we released a dependency update a few days ago (#558) is it possible this is already fixed in the latest?

edit: never mind, just checked yarn.lock and confirmed mem@1.1.0 is still there.

[Harmon758]

Resolved by 8610555 (#562) in idyll@4.6.0.