Fix npm vulnerabilities

jishi / node-sonos-http-api

An HTTP API bridge for Sonos easing automation. Hostable on any node.js capable device, like a raspberry pi or similar.

http://jishi.github.io/node-sonos-http-api/

MIT License

1.84k stars 463 forks source link

Fix npm vulnerabilities #717

Open anall opened 5 years ago

anall commented 5 years ago

I decided against basing this on the other vuln fix + eslint patch.

As far as I can tell, there are no issues caused by upgrading request-promise this far. It might be worth it to switch to request-promise-native if you are willing to bump the minimum node version required.