{"action":"created","issue":{"url":"https://api.github.com/repos/mulesoft/osprey/issues/112","repository_url":"https://api.github.com/repos/mulesoft/osprey","labels_url":"https://api.github.com/repos/mulesoft/osprey/issues/112/labels{/name}","comments_url":"https://api.github.com/repos/mulesoft/osprey/issues/112/comments","events_url":"https://api.github.com/repos/mulesoft/osprey/issues/112/events","html_url":"https://github.com/mulesoft/osprey/pull/112","id":174421446,"number":112,"title":"upgrade vulnerable package","user":{"login":"nmors","id":6028967,"avatar_url":"https://avatars.githubusercontent.com/u/6028967?v=3","gravatar_id":"","url":"https://api.github.com/users/nmors","html_url":"https://github.com/nmors","followers_url":"https://api.github.com/users/nmors/followers","following_url":"https://api.github.com/users/nmors/following{/other_user}","gists_url":"https://api.github.com/users/nmors/gists{/gist_id}","starred_url":"https://api.github.com/users/nmors/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/nmors/subscriptions","organizations_url":"https://api.github.com/users/nmors/orgs","repos_url":"https://api.github.com/users/nmors/repos","events_url":"https://api.github.com/users/nmors/events{/privacy}","received_events_url":"https://api.github.com/users/nmors/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":7,"created_at":"2016-09-01T02:19:57Z","updated_at":"2016-09-02T15:54:05Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/mulesoft/osprey/pulls/112","html_url":"https://github.com/mulesoft/osprey/pull/112","diff_url":"https://github.com/mulesoft/osprey/pull/112.diff","patch_url":"https://github.com/mulesoft/osprey/pull/112.patch"},"body":""},"comment":{"url":"https://api.github.com/repos/mulesoft/osprey/issues/comments/244414349","html_url":"https://github.com/mulesoft/osprey/pull/112#issuecomment-244414349","issue_url":"https://api.github.com/repos/mulesoft/osprey/issues/112","id":244414349,"user":{"login":"tbruno","id":1414141,"avatar_url":"https://avatars.githubusercontent.com/u/1414141?v=3","gravatar_id":"","url":"https://api.github.com/users/tbruno","html_url":"https://github.com/tbruno","followers_url":"https://api.github.com/users/tbruno/followers","following_url":"https://api.github.com/users/tbruno/following{/other_user}","gists_url":"https://api.github.com/users/tbruno/gists{/gist_id}","starred_url":"https://api.github.com/users/tbruno/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tbruno/subscriptions","organizations_url":"https://api.github.com/users/tbruno/orgs","repos_url":"https://api.github.com/users/tbruno/repos","events_url":"https://api.github.com/users/tbruno/events{/privacy}","received_events_url":"https://api.github.com/users/tbruno/received_events","type":"User","site_admin":false},"created_at":"2016-09-02T15:54:05Z","updated_at":"2016-09-02T15:54:05Z","body":"We are making use of Caret ranges (https://docs.npmjs.com/misc/semver#caret-ranges-123-025-004)\r\n\r\n> Allows changes that do not modify the left-most non-zero digit in the [major, minor, patch] tuple. In other words, this allows patch and minor updates for versions 1.0.0 and above, patch updates for versions 0.X >=0.1.0, and no updates for versions 0.0.X.\r\n\r\nSo by having \"request-error-handler\": \"^1.0.0\" in Osprey's package.json and \"negotiator\": \"^0.6.0\" in request-error-handler's package.json, we are indeed telling NPM to install the latest minor and patch in 1.x.x for \"request-error-handler\" and the latest patch in 0.6.x for \"negotiator\"."}}
{"actor":{"display_login":"tbruno"}}