Latest version on npm is 6.6.5

[arj03]

But github only shows 6.6.4?

[simon-p-r]

Version 6.6.5 pulls in a vunerable version of bl via levelup whereas 6.6.4 does not depend on levelup

                                 Manual Review
             Some vulnerabilities require your attention to resolve

          Visit https://go.npm.me/audit-guide for additional guidance


  Moderate        Memory Exposure

  Package         bl

  Patched in      >=0.9.5 <1.0.0 || >=1.0.1

  Dependency of   level-sublevel

  Path            level-sublevel > levelup > bl

  More info       https://nodesecurity.io/advisories/596

found 1 moderate severity vulnerability in 552 scanned packages
  1 vulnerability requires manual review. See the full report for details.

[vweevers]

6.6.3 and 6.6.4 are broken (see #116, #117), so 6.6.5 was released, which reverts to 6.6.2.

[simon-p-r]

Thanks @vweevers but I cannot see the commit for 6.6.5 which is causing issue, I will replace level-sublevel as appears to be unusable at present

[vweevers]

@simon-p-r You could pin to 6.6.2. If you're looking for a replacement, see subleveldown.

[simon-p-r]

Yes I will make switch thanks!