title: How do I resolve a Git Dependabot security alert for set-value cause by using gulp?
body: <p>I have a git repo with a css/js project whose build is orchestrated by Gulp. Recently Dependabot has flagged a security alert for set-value: <em>'gulp@4.0.2 requires set-value@^2.0.0 via a transitive dependency on cache-base@1.0.1' 'The earliest fixed version is 4.0.1'</em>.</p>
  <p>It seems that 4.0.2 is the most recent version of Gulp so I'm not sure how to resolve this. I'm hoping given the almost 2 million downloads of Gulp per week that someone will have a solution to this.</p>