In reference to this discussion:
moment/moment#2936

We've included NSP in our build process and with this vulnerability was curious if there was a short-term plan to address this? I've looked around this and the joi repository but couldn't find any open / closed issues addressing this.