propper

Merge pull request #3 from allain/dependabot/npm_and_yarn/path-parse-1.0.7

Bump path-parse from 1.0.6 to 1.0.7

Merge pull request #2 from allain/dependabot/npm_and_yarn/minimist-1.2.6

Bump minimist from 1.2.5 to 1.2.6

incorporating guard against prototype chain pollution from: https://github.com/418sec/propper/pull/1