This affects the package properties-reader before 2.2.0.
https://security.snyk.io/vuln/SNYK-JS-PROPERTIESREADER-1048968
https://github.com/steveukx/properties/issues/40
https://github.com/steveukx/properties/commit/0877cc871db9865f58dd9389ce99e61be05380a5