Update Package.json Dependencies

[oscartbeaumont]

Problem

There are currently node security warnings in Github because the dependencies are out of date. As electron-widevinecdm package is now deprecated and is not compatibility with the latest Electron updating is not possible.

Solution

I am working on an updated fork or maintainership for the electron-widevinecdm package to solve this issue.

[oscartbeaumont]

Everything was updated as far as possible without breaking Widevine in commit 26e6fd8. Work needs to be done on the electron-widevinecdm package to support newer versions of Electron.

[oscartbeaumont]

This is looking like a lost cause because by the looks of it Widevine now requires a licence and so updating the environment without having a licence is not possible. I have applied for a licence but am by no means expecting to get one (if you could help with this please contact me). More details about the Widevine licence requirement can be found on the official Electron Widevine page and this Github issue. Between Electron version 3.1.7 and 4.0.0 they updated Chromium and I have not been able to get Widevine working with version 4.0.0. I am really hoping there will not be any major security flaws in Electron 3.1.7 cause that would make for a very difficult situation. With the licence, I would move to electron-releases which is Electron slightly modified for easy support for Widevine VMP.

[oscartbeaumont]

This is also why I think the testing software I have tried for issue #4 have not been working as expected.

[oscartbeaumont]

I am closing this issue as the dependencies are currently updated as much as possible. The only non fully updated dependency is Electron on Mac and this is due to Widevine which is always going to be out of my control and it is not worth cluttering the issue tracker which a single package that is going to be on an older version for a long time.