title: how to remove npm module vulnerability babel-cli@6.23.0 in braces?
body: <p>I want to remove the vulnerability in npm audit,</p>
  
  <p><a href="https://snyk.io/test/npm/babel-cli/6.23.0" rel="nofollow noreferrer">https://snyk.io/test/npm/babel-cli/6.23.0</a></p>
  
  <p>how to update the chokidar module?</p>
  
  <p>how to update dependent module without updating parent module?                             </p>
  
  <pre><code>    Manual Review                                  
               Some vulnerabilities require your attention to resolve             
  
            Visit https://go.npm.me/audit-guide for additional guidance           
  
  
    Low             Regular Expression Denial of Service                          
  
    Package         braces                                                        
  
    Patched in      &gt;=2.3.1                                                       
  
    Dependency of   babel-cli [dev]                                               
  
    Path            babel-cli &gt; chokidar &gt; anymatch &gt; micromatch &gt; braces         
  
    More info       https://npmjs.com/advisories/786     
  </code></pre>