weinre and protractor have security issues

[JosefJezek]

https://www.bithound.io/github/BrowserSync/UI/master/dependencies/npm#filter-insecure-dep

[SimenB]

Weinre won't be developed anymore, so might be worth looking for alternatives?

https://issues.apache.org/jira/browse/CB-10358
https://issues.apache.org/jira/browse/CB-10590

[andyperlitch]

+1.

Weinre lists an old version of express (uses 2.x, where latest is 4.x). This seems to be what is dictating the version being run by browser-sync, which is frustrating due to issues with the old express version. Specifically, my use-case calls for middleware and it seems as though the res does not have several properties expected by that version of express, including req and app. Here is my BS config:

let browserSyncConfig = {
    server: {
      baseDir: baseDirs,
      middleware: [function(req, res, next) {
        // expected by node_modules/express/lib/response.js, but all undefined:
        console.log(typeof res.req); // undefined
        console.log(typeof res.app); // undefined
        console.log(typeof res.enabled); // undefined
        next();
      }]
    },
    open: false,
    notify: false
  };