Merge pull request #622 from oauthjs/fix/update-v3-strategy

This rolls back mocha and sinon to the last release that support node v4, which allows us to keep testing against node v4 in our v3 release line.

This mocha version does contain a vulnerability, however as this is only used for testing this package will not be installed for users of this library and so will not expose any risk (and should not be flagged to users running npm audit)

Author: thomseddon

.travis.yml

@@ -1,6 +1,9 @@
 language: node_js
 
 node_js:
+  - 4
+  - 6
+  - 8
   - 10
   - 12
   - 13

README.md

@@ -1,6 +1,3 @@
-# This project is seeking maintainers and reviewers
-
-## The currently released version is now significantly out of date. The project has been rewritten in typescript ([#564](https://github.com/oauthjs/node-oauth2-server/pull/564)), we're now working in the [v5-dev](https://github.com/oauthjs/node-oauth2-server/tree/v5-dev) branch and we're seeking further review, testing and documentation - any help with this popular project would be hugely appreciated, anyone providing consistent help will be promoted to collaborator.
 
 # oauth2-server
 
@@ -12,6 +9,7 @@
 
 Complete, compliant and well tested module for implementing an OAuth2 server in [Node.js](https://nodejs.org).
 
+Note: After a period of hiatus, this project is now back under active maintenance. Dependencies have been updated and bug fixes will land in v3 (current master). v4 will be _mostly backwards compatible_ with no code changes required for users using a supported node release. More details in [#621](https://github.com/oauthjs/node-oauth2-server/issues/621).
 
 ## Installation