a vulnerability CVE-2020-28469 is introduced in pri

[ayaka-kms]

Hi, a vulnerability CVE-2020-28469 is introduced in pri via:
● [email protected] ➔ [email protected] ➔ [email protected]

However, gulp-watch is a legacy package, which has not been maintained for about 3 years.
Is it possible to migrate gulp-watch to other package to remediate this vulnerability?

I noticed several migration records in other js repo for gulp-watch:

1. in babel, version 2.10.1 ➔ 3.0.0, replace gulp-watch by gulp.watch via commit
2. in whoisaurel/blendid-accessibility, replaces gulp-watch by gulp's watch via commit

Are there any efforts planned that would remediate this vulnerability or migrate gulp-watch?

Thanks.