vulnerability in socket.io

[davidem]

First: thanks for reveal-hugo: an awesome way to make presentations with hugo.

Dependabot is complaining about a socket.io vulnerability. In "themes/reveal-hugo/static/reveal-js/plugin/multiplex/package.json" a dependency is found for "socket.io": "~1.3.7".

According to github it can be solved using "socket.io": ">=2.4.0".

Cheers,

David

[joshed-io]

@davidem Thanks! Would you care to submit a PR to bring us up to date?

[sumodirjo]

I'm checking #91 and this update doesn't have multiplex plugin installed since revealjs 4.0.2 is not shipped with multiplex plugin (https://github.com/hakimel/reveal.js/tree/4.0.2/plugin).

I think PR #91 will kinda fix this issue.