-
achingbrain I've been doing a bit more digging, and hapi@13.0.0 is definitely carrying 4 vuln paths to moment:
-
achingbrain but I believe nsp is missing it because it's reading the package.json and missing the top level npm-shrinkwrap on hapi.
