johnpapa / johnpapa/lite-server
Update reference `browser-sync`
Open
- Dominant language
- JavaScript
- Stars
- 2.3k
- Forks
- 262
- PR merge metrics
- No merged PRs in 30d
Description
### Update reference `browser-sync`
Bump dependency `browser-sync` (to v2.13.0 or higher), to inherit `resp-modifier`, to inherit `minimatch` that fixes [Regular Expression Denial of Service](https://nodesecurity.io/advisories/118)
The current referenced version of `browser-sync` (v2.12.3) produces the warning:
`npm WARN deprecated minimatch@2.0.10: Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue`
### Repro
1. Create new project that references `lite-server` v2.2.2
2. run `npm install`
### Environment
- `lite-server` version: 2.2.2
- `nodejs` version: 6.*
- `npm` version: 3.*
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.