Fix all security related issues,

.eslintrc.js

@@ -0,0 +1,26 @@
+module.exports = {
+  'env': {
+    'browser': true,
+    'es6': true,
+    'node': true,
+  },
+  'extends': [
+    'google',
+  ],
+  'globals': {
+    'Atomics': 'readonly',
+    'SharedArrayBuffer': 'readonly',
+  },
+  'parserOptions': {
+    'ecmaFeatures': {
+      'jsx': true,
+    },
+    'ecmaVersion': 2018,
+    'sourceType': 'module',
+  },
+  'plugins': [
+    'react',
+  ],
+  'rules': {
+  },
+};

.gitignore

@@ -5,3 +5,4 @@ coverage
 .idea
 npm-debug.log
 lib
+.nyc_output

.travis.yml

@@ -1,4 +1,6 @@
 language: node_js
 node_js:
-  - 6
-  - 4
+  - "node"
+  - 12
+  - 10
+  - 8

index.js

@@ -1,24 +1,23 @@
+/* eslint-disable require-jsdoc */
 /* @flow weak */
 'use strict';
 
-
-var Q = require('q');
-var fs = require('fs');
-var path = require('path');
-var gutil = require('gulp-util');
-var through = require('through2');
-var flowBin = require('flow-bin');
-var logSymbols = require('log-symbols');
-var childProcess = require('child_process');
-var chalk = require('chalk');
-var reporter = require('flow-reporter');
+const Q = require('q');
+const fs = require('fs');
+const path = require('path');
+const gutil = require('gulp-util');
+const through = require('through2');
+const flowBin = require('flow-bin');
+const logSymbols = require('log-symbols');
+const childProcess = require('child_process');
+const reporter = require('flow-reporter');
 
 /**
  * Flow check initialises a server per folder when run,
  * we can store these paths and kill them later if need be.
  */
-var servers = [];
-var passed = true;
+const servers = [];
+let passed = true;
 
 /**
  * Wrap critical Flow exception into default Error json format
@@ -31,14 +30,14 @@ function fatalError(stderr) {
         code: 0,
         line: 0,
         start: 0,
-        descr: stderr
-      }]
-    }]
+        descr: stderr,
+      }],
+    }],
   };
 }
 
 function optsToArgs(opts) {
-  var args = [];
+  const args = [];
 
   if (opts.all) {
     args.push('--all');
@@ -54,155 +53,147 @@ function optsToArgs(opts) {
 }
 
 function getFlowBin() {
-    return process.env.FLOW_BIN || flowBin;
+  return process.env.FLOW_BIN || flowBin;
 }
 
 function executeFlow(_path, options) {
-  var deferred = Q.defer();
+  const deferred = Q.defer();
 
-  var opts = optsToArgs(options);
+  const opts = optsToArgs(options);
 
-  var command = opts.length || options.killFlow ? (() => {
+  const command = opts.length || options.killFlow ? (() => {
     servers.push(path.dirname(_path));
     return 'check';
   })() : 'status';
 
-  var args = [
+  const args = [
     command,
     ...opts,
     '/' + path.relative('/', _path),
-    '--json'
+    '--json',
   ];
 
-  var stream = childProcess.spawn(getFlowBin(), args);
+  const stream = childProcess.spawn(getFlowBin(), args);
 
-  var dat = "";
-  stream.stdout.on('data', data => {
+  let dat = '';
+  stream.stdout.on('data', (data) => {
     dat += data.toString();
   });
 
-  stream.stdout.on('end', () =>{
-    var parsed;
+  stream.stdout.on('end', () => {
+    let parsed;
     try {
       parsed = JSON.parse(dat);
-    }
-    catch(e) {
+    } catch (e) {
       parsed = fatalError(dat);
     }
-    var result = {};
+    const result = {};
 
     // loop through errors in file
-    result.errors = parsed.errors.filter(function (error) {
-      let isCurrentFile = error.message[0].path === _path;
-      let generalError = (/(Fatal)/.test(error.message[0].descr));
+    result.errors = parsed.errors.filter(function(error) {
+      const isCurrentFile = error.message[0].path === _path;
+      const generalError = (/(Fatal)/.test(error.message[0].descr));
 
       return isCurrentFile || generalError;
     });
 
     if (result.errors.length) {
       passed = false;
 
-      var report = typeof options.reporter === 'undefined' ?
+      const report = typeof options.reporter === 'undefined' ?
         reporter : options.reporter;
       report(result.errors);
 
       if (options.abort) {
         deferred.reject(new gutil.PluginError('gulp-flow', 'Flow failed'));
-      }
-      else {
+      } else {
         deferred.resolve();
       }
-    }
-    else {
+    } else {
       deferred.resolve();
     }
-  })
+  });
 
   return deferred.promise;
 }
 
 function checkFlowConfigExist() {
-  var deferred = Q.defer();
-  var config = path.join(process.cwd(), '.flowconfig');
+  const deferred = Q.defer();
+  const config = path.join(process.cwd(), '.flowconfig');
   fs.exists(config, function(exists) {
     if (exists) {
       deferred.resolve();
-    }
-    else {
+    } else {
       deferred.reject('Missing .flowconfig in the current working directory.');
     }
   });
   return deferred.promise;
 }
 
 function hasJsxPragma(contents) {
-  return /@flow\b/ig
-    .test(contents);
+  return /@flow\b/ig.test(contents);
 }
 
 function isFileSuitable(file) {
-  var deferred = Q.defer();
+  const deferred = Q.defer();
   if (file.isNull()) {
     deferred.reject();
-  }
-  else if (file.isStream()) {
-    deferred.reject(new gutil.PluginError('gulp-flow', 'Stream content is not supported'));
-  }
-  else if (file.isBuffer()) {
+  } else if (file.isStream()) {
+    deferred.reject(new gutil.PluginError('gulp-flow',
+        'Stream content is not supported'));
+  } else if (file.isBuffer()) {
     deferred.resolve();
-  }
-  else {
+  } else {
     deferred.reject();
   }
   return deferred.promise;
 }
 
 function killServers() {
-  var defers = servers.map(function(_path) {
-    var deferred = Q.defer();
+  const defers = servers.map(function(_path) {
+    const deferred = Q.defer();
     childProcess.execFile(getFlowBin(), ['stop'], {
-      cwd: _path
+      cwd: _path,
     }, deferred.resolve);
     return deferred;
   });
   return Q.all(defers);
 }
 
-module.exports = function (options={}) {
+module.exports = function(options = {}) {
   options.beep = typeof options.beep !== 'undefined' ? options.beep : true;
 
   function Flow(file, enc, callback) {
-
-    var _continue = () => {
+    const _continue = () => {
       this.push(file);
       callback();
     };
 
     isFileSuitable(file).then(() => {
-      var hasPragma = hasJsxPragma(file.contents.toString());
+      const hasPragma = hasJsxPragma(file.contents.toString());
       if (options.all || hasPragma) {
         checkFlowConfigExist().then(() => {
-          executeFlow(file.path, options).then(_continue, err => {
+          executeFlow(file.path, options).then(_continue, (err) => {
             this.emit('error', err);
             callback();
           });
-        }, msg => {
+        }, (msg) => {
           console.log(logSymbols.warning + ' ' + msg);
           _continue();
         });
       } else {
         _continue();
       }
-    }, err => {
+    }, (err) => {
       if (err) {
         this.emit('error', err);
       }
       callback();
     });
   }
 
-  return through.obj(Flow, function () {
-    var end = () => {
+  return through.obj(Flow, function() {
+    const end = () => {
       this.emit('end');
       passed = true;
     };
@@ -216,8 +207,7 @@ module.exports = function (options={}) {
     if (options.killFlow) {
       if (servers.length) {
         killServers().done(end);
-      }
-      else {
+      } else {
         end();
       }
     } else {