diff --git a/package-lock.json b/package-lock.json
index e670fe4a..9e054799 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -430,36 +430,41 @@
       "integrity": "sha512-bA+dyydTNuQtrEDJ0g9eR7XabNhvrM5yZY0hvTbNK3yvoeC73ZqMES6E1cEqH9WPxs4uMtMsOjfwS4FmluhsAA=="
     },
     "airplay-protocol": {
-      "version": "2.0.2",
-      "resolved": "https://registry.npmjs.org/airplay-protocol/-/airplay-protocol-2.0.2.tgz",
-      "integrity": "sha1-tbKnE3Mx9VRay+GWulaTwTI4/F4=",
+      "version": "github:webtorrent/airplay-protocol#a715752fc206ebbb8b2047573cdd81dded4970f5",
+      "from": "github:webtorrent/airplay-protocol#master",
       "requires": {
-        "bplist-creator": "^0.0.6",
+        "bplist-creator": "^0.0.7",
         "bplist-parser": "^0.1.1",
-        "concat-stream": "^1.5.1",
-        "plist": "^1.2.0",
+        "concat-stream": "^1.5.2",
+        "plist": "^2.0.1",
         "reverse-http": "^1.2.0"
       },
       "dependencies": {
-        "plist": {
-          "version": "1.2.0",
-          "resolved": "https://registry.npmjs.org/plist/-/plist-1.2.0.tgz",
-          "integrity": "sha1-CEtQk93JJQbiWfh0uNmxr7jHlZM=",
+        "bplist-creator": {
+          "version": "0.0.7",
+          "resolved": "https://registry.npmjs.org/bplist-creator/-/bplist-creator-0.0.7.tgz",
+          "integrity": "sha1-N98VNgkoJLh8QvlXsBNEEXNyrkU=",
           "requires": {
-            "base64-js": "0.0.8",
-            "util-deprecate": "1.0.2",
-            "xmlbuilder": "4.0.0",
+            "stream-buffers": "~2.2.0"
+          }
+        },
+        "plist": {
+          "version": "2.1.0",
+          "resolved": "https://registry.npmjs.org/plist/-/plist-2.1.0.tgz",
+          "integrity": "sha1-V8zbeggh3yGDEhejytVOPhRqECU=",
+          "requires": {
+            "base64-js": "1.2.0",
+            "xmlbuilder": "8.2.2",
             "xmldom": "0.1.x"
           }
         }
       }
     },
     "airplayer": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/airplayer/-/airplayer-2.0.0.tgz",
-      "integrity": "sha1-erYtI7ltRCNBOK7BKB0uZ+8ZAlk=",
+      "version": "github:webtorrent/airplayer#2c0da53adea3799090e62ffae30fd5825d6ad423",
+      "from": "github:webtorrent/airplayer#fix-security",
       "requires": {
-        "airplay-protocol": "^2.0.2",
+        "airplay-protocol": "github:webtorrent/airplay-protocol#master",
         "appendable-cli-menu": "^2.0.0",
         "bonjour": "^3.3.1",
         "internal-ip": "^1.2.0",
@@ -939,9 +944,9 @@
       "optional": true
     },
     "base64-js": {
-      "version": "0.0.8",
-      "resolved": "https://registry.npmjs.org/base64-js/-/base64-js-0.0.8.tgz",
-      "integrity": "sha1-EQHpVE9KdrG8OybUUsqW16NeeXg="
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/base64-js/-/base64-js-1.2.0.tgz",
+      "integrity": "sha1-o5mS1yNYSBGYK+XikLtqU9hnAPE="
     },
     "bcrypt-pbkdf": {
       "version": "1.0.2",
@@ -1284,6 +1289,7 @@
       "version": "0.0.6",
       "resolved": "https://registry.npmjs.org/bplist-creator/-/bplist-creator-0.0.6.tgz",
       "integrity": "sha1-/vBpvuhZdbLdzCJkqqfFDcF6PH4=",
+      "optional": true,
       "requires": {
         "stream-buffers": "~2.2.0"
       }
@@ -5301,11 +5307,6 @@
       "resolved": "https://registry.npmjs.org/location-history/-/location-history-1.1.1.tgz",
       "integrity": "sha512-RcT2NIWJJOBIsTBqNLXCuFxcgLMAMk7Nijbx/+c00QiwIHXzExBcxiAlN9GI97/ZtDqz7bvO5M4udLWaisdmtQ=="
     },
-    "lodash": {
-      "version": "3.10.1",
-      "resolved": "https://registry.npmjs.org/lodash/-/lodash-3.10.1.tgz",
-      "integrity": "sha1-W/Rejkm6QYnhfUgnid/RW9FAt7Y="
-    },
     "lodash._reinterpolate": {
       "version": "3.0.0",
       "resolved": "https://registry.npmjs.org/lodash._reinterpolate/-/lodash._reinterpolate-3.0.0.tgz",
@@ -10410,12 +10411,9 @@
       }
     },
     "xmlbuilder": {
-      "version": "4.0.0",
-      "resolved": "https://registry.npmjs.org/xmlbuilder/-/xmlbuilder-4.0.0.tgz",
-      "integrity": "sha1-mLj2UcowqmJANvEn0RzGbce5B6M=",
-      "requires": {
-        "lodash": "^3.5.0"
-      }
+      "version": "8.2.2",
+      "resolved": "https://registry.npmjs.org/xmlbuilder/-/xmlbuilder-8.2.2.tgz",
+      "integrity": "sha1-aSSGc0ELS6QuGmE2VR0pIjNap3M="
     },
     "xmldom": {
       "version": "0.1.27",