cosmiconfig 8.x version giving License Risk -> High for blackduck scan

[imakshar]

Current behavior

cosmiconfig 8.x version is giving a high-risk License issue in the BlackDuck scan.

PFA

Expected behavior

The latest version of cosmiconfig is 9.0.0, so updating it to the latest version might solve the issue of the BlackDuck scan. Or it should not give a vulnerability issue for the cosmiconfig dependency.

Steps to reproduce the issue

Install fork-ts-checker-webpack-plugin and scan it through BlackDuck scan or any scanner that gives you vulnerability issues.

Issue reproduction repository

NA

Environment

• fork-ts-checker-webpack-plugin: [9.1.0 from the package.json]
• typescript: [5.0 from the package.json]
• eslint: [7.32.0 from the package.json]
• webpack: NA
• vite: 4.5.5
• os: [Ubuntu 22.04.4 LTs]