Hello,

your package hive-driver is using jshs2 which is very old and uses version of lodash targeted in critical CVE-2019-10744

thank you for your product :)
regards