Nightwatch: Bithound reports insecure dependencies

[obartra]

Bithounds reports a couple of outdated dependencies for nightwatch as detailed here. In particular the ejs version used seems the highest risk one.

Because of it, when using the latest version of nightwatch, bithound reports my dev dependencies as insecure ()

I was wondering if there were any plans to update to a safer version of ejs.

[ridrum]

Hi @obartra !

You could create a PR for this issue. EJS is only used for the html report (I think). The correction should not take so much time

[StephanBijzitter]

Would also be a nice time to enable Greenkeeper 👍

[obartra]

I tried updating it today but looks like there's been a couple breaking changes since. greenkeeper and npm lock would be nice additions

[ridrum]

@obartra Let me know if you need some help for the PR

[StephanBijzitter]

@ridrum someone already started a PR, but it's failing on Travis
https://github.com/nightwatchjs/nightwatch/pull/1547

[avindra]

Can someone who is intimately familiar with the code have a look at the failures on https://github.com/nightwatchjs/nightwatch/pull/1547 ?

By changing harcoded test values, I can get tests to pass, but only on one version of node.js.

Would like to get some movement on this, so I'll help in any way I can.

[stale[bot]]

This issue has been automatically marked as stale because it has not had any recent activity.
If possible, please retry using the latest Nightwatch version and update the issue with any relevant details. If no further activity occurs, it will be closed. Thank you for your contribution.