gulp-nunit-runner is now the only dep I have pulling in vulnerable dependencies. Please update and re-publish.
This repo looks like it's been inactive for a while. If you don't have time to maintain the package, please contact me: I'm willing to take over, as I already did for gulp-msbuild.
Thanks.