Merge pull request #48 from Banno/vuln/79-lodash

chore(deps): replace dependencies that use vulnerable lodash.template

gulpfile.js

@@ -2,10 +2,10 @@
 
 const gulp = require('gulp');
 const merge = require('merge-stream');
-const header = require('gulp-header');
+const prepend = require('gulp-prepend');
 const rename = require('gulp-rename');
 const sass = require('gulp-sass')(require('sass'));
-const cssmin = require('gulp-cssmin');
+const cleanCss = require('gulp-clean-css');
 const svgstore = require('gulp-svgstore');
 const svgmin = require('gulp-svgmin');
 const connect = require('gulp-connect');
@@ -37,16 +37,16 @@ const copy = () => {
 
 const styles = () => {
   const banner = ['/*!',
-    ' * <%= pkg.name %> - <%= pkg.description %>',
-    ' * @version v<%= pkg.version %>',
-    ' * @link <%= pkg.homepage %>',
+    ` * ${pkg.name} - ${pkg.description}`,
+    ` * @version v${pkg.version}`,
+    ` * @link ${pkg.homepage}`,
     '*/',
     ''].join('\n');
 
   return gulp.src('src/css/core.scss')
     .pipe(sass())
-    .pipe(cssmin())
-    .pipe(header(banner, { pkg: pkg }))
+    .pipe(cleanCss())
+    .pipe(prepend(banner))
     .pipe(rename('style.min.css'))
     .pipe(gulp.dest('dist/css'))
     .pipe(connect.reload());

package.json

@@ -12,11 +12,11 @@
   "devDependencies": {
     "del": "^6.1.1",
     "gulp": "^4.0.2",
+    "gulp-clean-css": "^4.3.0",
     "gulp-connect": "^5.7.0",
-    "gulp-cssmin": "^0.2.0",
-    "gulp-header": "^2.0.9",
     "gulp-imagemin": "^7.1.0",
     "gulp-livereload": "^4.0.2",
+    "gulp-prepend": "^0.3.0",
     "gulp-rename": "^2.0.0",
     "gulp-sass": "^5.1.0",
     "gulp-svgmin": "^4.1.0",