{"action":"created","issue":{"url":"https://api.github.com/repos/cfpb/retirement/issues/164","repository_url":"https://api.github.com/repos/cfpb/retirement","labels_url":"https://api.github.com/repos/cfpb/retirement/issues/164/labels{/name}","comments_url":"https://api.github.com/repos/cfpb/retirement/issues/164/comments","events_url":"https://api.github.com/repos/cfpb/retirement/issues/164/events","html_url":"https://github.com/cfpb/retirement/pull/164","id":150851382,"number":164,"title":"Improve NPM package security","user":{"login":"marteki","id":1183435,"avatar_url":"https://avatars.githubusercontent.com/u/1183435?v=3","gravatar_id":"","url":"https://api.github.com/users/marteki","html_url":"https://github.com/marteki","followers_url":"https://api.github.com/users/marteki/followers","following_url":"https://api.github.com/users/marteki/following{/other_user}","gists_url":"https://api.github.com/users/marteki/gists{/gist_id}","starred_url":"https://api.github.com/users/marteki/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/marteki/subscriptions","organizations_url":"https://api.github.com/users/marteki/orgs","repos_url":"https://api.github.com/users/marteki/repos","events_url":"https://api.github.com/users/marteki/events{/privacy}","received_events_url":"https://api.github.com/users/marteki/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2016-04-25T13:07:30Z","updated_at":"2016-04-25T13:15:33Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/cfpb/retirement/pulls/164","html_url":"https://github.com/cfpb/retirement/pull/164","diff_url":"https://github.com/cfpb/retirement/pull/164.diff","patch_url":"https://github.com/cfpb/retirement/pull/164.patch"},"body":"This PR improves how we deal with NPM package dependencies, and adds some monitoring and protection through the use of the https://snyk.io/ service.\r\n\r\n## Additions\r\n\r\n- `snyk` is now protecting this repository\r\n- Our NPM packages have been pinned and shrinkwrapped.\r\n\r\n## Changes\r\n\r\n- Cleaned up our dependency categorization a bit.\r\n- Updated our repository description in `package.json`.\r\n\r\n## Testing\r\n\r\n- Pull down the branch. Run `npm install`, and then `snyk test`. You should see the following:\r\n\r\n> ✓ Tested 532 dependencies for known vulnerabilities, no vulnerable paths found.\r\n\r\n## Review\r\n\r\n- @ascott1 \r\n- @mistergone @higs4281 @niqjohnson \r\n\r\n## Checklist\r\n\r\n* [x] Changes are limited to a single goal (no scope creep)\r\n* [x] Code can be automatically merged (no conflicts)\r\n* [x] Code follows the standards laid out in the [front end playbook](https://github.com/cfpb/front-end)\r\n* [x] Passes all existing automated tests\r\n* [x] New functions include new tests\r\n* [x] New functions are documented (with a description, list of inputs, and expected output)\r\n* [x] Placeholder code is flagged\r\n* [x] Visually tested in supported browsers and devices\r\n* [x] Project documentation has been updated (including the \"Unreleased\" section of the CHANGELOG)\r\n"},"comment":{"url":"https://api.github.com/repos/cfpb/retirement/issues/comments/214315842","html_url":"https://github.com/cfpb/retirement/pull/164#issuecomment-214315842","issue_url":"https://api.github.com/repos/cfpb/retirement/issues/164","id":214315842,"user":{"login":"higs4281","id":515885,"avatar_url":"https://avatars.githubusercontent.com/u/515885?v=3","gravatar_id":"","url":"https://api.github.com/users/higs4281","html_url":"https://github.com/higs4281","followers_url":"https://api.github.com/users/higs4281/followers","following_url":"https://api.github.com/users/higs4281/following{/other_user}","gists_url":"https://api.github.com/users/higs4281/gists{/gist_id}","starred_url":"https://api.github.com/users/higs4281/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/higs4281/subscriptions","organizations_url":"https://api.github.com/users/higs4281/orgs","repos_url":"https://api.github.com/users/higs4281/repos","events_url":"https://api.github.com/users/higs4281/events{/privacy}","received_events_url":"https://api.github.com/users/higs4281/received_events","type":"User","site_admin":false},"created_at":"2016-04-25T13:15:33Z","updated_at":"2016-04-25T13:15:33Z","body":"👍 ran snyk and got the desired results. our packages thank you!"}}