cbd9114599
fixes security for eslint-utils, which isn't part of the published package; no same-day point-plusone release required