browser-sync dependency vulnerability (localtunnel -> axios)

Issue details

browser-sync depends upon localtunnel 1.9.1, which depends upon axios 0.17.1, which has an outstanding security vulnerability. This causes warnings across every GitHub repo that is using browser-sync.

Steps to reproduce/test case

Have localtunnel 1.9.1 in your package-lock.json.

Please specify which version of Browsersync, node and npm you’re running

• Browsersync [ 1.9.1 ]
• Node [ ]
• Npm [ ]

Affected platforms

• linux
• windows
• OS X
• freebsd
• solaris
• other (please specify which)

Browsersync use-case

• API
• Gulp
• Grunt
• CLI

If CLI, please paste the entire command below

N/A

for all other use-cases, (gulp, grunt etc), please show us exactly how you’re using

The vulnerability warning can be seen here: https://github.com/mozilla/ssl-config-generator/network/alert/package-lock.json/axios/open

This issue is dependent upon the following issue: https://github.com/localtunnel/localtunnel/issues/302

[gverni]

The localtunnel issue is now fixed in version 1.9.2.

[snuggs]

@gverni GREAT!

@april waiting on @gaards to merge.

@shakyShane any chance of expediting the merge of this vulnerability fix? I know you took care of the last few.