fix: remove high security vuln & replace with other ip checking pkg

package.json

@@ -20,6 +20,6 @@
     "registry": "https://artifactory.brandwatch.com/artifactory/api/npm/npm"
   },
   "dependencies": {
-    "ip": "^2.0.1"
+    "ipaddr.js": "^2.2.0"
   }
 }

src/index.js

@@ -1,7 +1,7 @@
 /**
  * Configure a ExpressJS middleware to expose useful health/metrics/checks endpoints.
  */
-const ip = require('ip');
+const ipaddr = require('ipaddr.js');
 
 // Default empty configuration
 let metrics;
@@ -33,7 +33,8 @@ const addMetrics = (m) => { metrics = m; };
 const getMiddleware = () => (req, res, next) => {
   const requestingIP = req.ip || req.connection.remoteAddress
                        || req.socket.remoteAddress || req.connection.socket.remoteAddress;
-  if (!ip.isPrivate(requestingIP)) {
+
+  if (!['private', 'loopback'].includes(ipaddr.parse(requestingIP).range())) {
     return next();
   }