[Snyk] Fix for 7 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Issue	Breaking Change	Exploit Maturity
	Prototype Pollution SNYK-JS-LODASH-450202	No	Proof of Concept
	Prototype Pollution SNYK-JS-LODASH-567746	No	Proof of Concept
	Prototype Pollution SNYK-JS-LODASH-73638	No	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-73639	No	No Known Exploit
	Remote Memory Exposure npm:bittorrent-dht:20160104	Yes	No Known Exploit
	Uninitialized Memory Exposure npm:ip:20170304	Yes	No Known Exploit
	Prototype Pollution npm:lodash:20180130	No	No Known Exploit

Commit messages

Package name: torrent-stream

The new version differs by 58 commits.

• 064991e 1.0.2
• b990ef1 prune deps
• 4148bdf 1.0.1
• 6f2c79f bump torrent-discovery
• 11090de Merge pull request #150 from ralphtheninja/master
• 7d507a9 add dependency badges
• 1e42279 add travis badge
• 1205f9f add .travis.yml
• 09f05e9 Merge pull request #141 from giacomocerquone/patch-1
• 224219c Added .on(idle), .on(torrent) and swarm.downloaded
• ec8dd65 1.0.0
• f37a085 Merge pull request #135 from feross/standard
• b3dbefd Merge pull request App doesn't start mafintosh/playback#134 from feross/master
• 77dbda0 use standard
• 072bcb6 Use `torrent-discovery` package
• cc3a748 Merge pull request Playing a feed from tcp or udp mafintosh/playback#133 from feross/master
• c7f249c make tests work offline (more reliable)
• 0a1cbfd BREAKING: Stores based on `abstract-chunk-store`
• e6771da Merge pull request Bump webtorrent from 0.63.4 to 0.107.16 mafintosh/playback#132 from feross/master
• 2671882 use `torrent-piece` package
• daced41 0.21.3
• 16334ef Merge pull request npm start can't work mafintosh/playback#130 from bsuh/fix-metadata-crash
• b5240d2 0.21.2
• a335e05 Merge pull request Unissue: It still works mafintosh/playback#128 from bsuh/fix-pulsing

See the full diff

Package name: ytdl-core

The new version differs by 23 commits.

• 0131b01 0.6.0
• 624bbe2 linting
• afcf6e7 Merge pull request youtube playlist + offline support mafintosh/playback#34 from raltamirano/master
• a093660 Moved video description cleansing/formatting to util.getVideoDescription
• ea59872 lint
• fc9c129 update readme with no request module
• 70974e7 Merge pull request Running code on Ubuntu 14.04 gives lodash error mafintosh/playback#38 from mallendeo/master
• 399e2f8 update util, replace entities with html-entities
• 5a174d1 update description regex
• a729e18 make util method to get video description
• b034334 remove cheerio dependency
• f0a376c Changed tabs to 2 spaces instead for consistency with the rest of the project
• afed11b no request dep in tests too
• 9dd3c02 remove request and lodash dependencies
• 62231cf replace underscore with lodash.assign
• 6fdc508 update wikipedia formats link
• 0b29392 add opus audio formats
• 0727f61 replace underscore with lodash.clone
• 8c1db33 Corrections per conversation on PR youtube playlist + offline support mafintosh/playback#34
• 183312e Revert "Update package.json"
• 855527d Update package.json
• b39f896 Video description cleansing/formatting like youtube-dl does
• 31cbde6 update cheerio ver

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic