PSA: If you have Dependabot alerts for “semver” and Dependabot can’t patch them for you…
Before you get into a horrible JS dependency mess, WAIT A FEW DAYS!
It looks like a bunch of popular tools are locked to semver v5.x and v6.x, but they’ve only patched v7.5.x
Babel’s team will fork and back port the fix soon if the semver maintainers don’t.