{"action":"created","issue":{"url":"https://api.github.com/repos/gruntjs/grunt-contrib-jasmine/issues/289","repository_url":"https://api.github.com/repos/gruntjs/grunt-contrib-jasmine","labels_url":"https://api.github.com/repos/gruntjs/grunt-contrib-jasmine/issues/289/labels{/name}","comments_url":"https://api.github.com/repos/gruntjs/grunt-contrib-jasmine/issues/289/comments","events_url":"https://api.github.com/repos/gruntjs/grunt-contrib-jasmine/issues/289/events","html_url":"https://github.com/gruntjs/grunt-contrib-jasmine/issues/289","id":379674510,"node_id":"MDU6SXNzdWUzNzk2NzQ1MTA=","number":289,"title":"Dependencies of the NPM packages not up to date","user":{"login":"saenglert","id":6491588,"node_id":"MDQ6VXNlcjY0OTE1ODg=","avatar_url":"https://avatars0.githubusercontent.com/u/6491588?v=4","gravatar_id":"","url":"https://api.github.com/users/saenglert","html_url":"https://github.com/saenglert","followers_url":"https://api.github.com/users/saenglert/followers","following_url":"https://api.github.com/users/saenglert/following{/other_user}","gists_url":"https://api.github.com/users/saenglert/gists{/gist_id}","starred_url":"https://api.github.com/users/saenglert/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/saenglert/subscriptions","organizations_url":"https://api.github.com/users/saenglert/orgs","repos_url":"https://api.github.com/users/saenglert/repos","events_url":"https://api.github.com/users/saenglert/events{/privacy}","received_events_url":"https://api.github.com/users/saenglert/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":5,"created_at":"2018-11-12T08:47:02Z","updated_at":"2018-11-13T08:16:17Z","closed_at":null,"author_association":"NONE","body":"Hello everyone,\r\nsince the security issue in #286 got reported a pull request #287 was merged into the main branch however there has been no new minor release yet to push these changes to the NPM. \r\n\r\nThis means packages depending on grunt-contrib-jasmine still include the vulnerable lodash version which in return causes errors in those packages build processes.\r\n\r\nI argue this is serious enough to warrant a new minor release.  "},"comment":{"url":"https://api.github.com/repos/gruntjs/grunt-contrib-jasmine/issues/comments/438175538","html_url":"https://github.com/gruntjs/grunt-contrib-jasmine/issues/289#issuecomment-438175538","issue_url":"https://api.github.com/repos/gruntjs/grunt-contrib-jasmine/issues/289","id":438175538,"node_id":"MDEyOklzc3VlQ29tbWVudDQzODE3NTUzOA==","user":{"login":"saenglert","id":6491588,"node_id":"MDQ6VXNlcjY0OTE1ODg=","avatar_url":"https://avatars0.githubusercontent.com/u/6491588?v=4","gravatar_id":"","url":"https://api.github.com/users/saenglert","html_url":"https://github.com/saenglert","followers_url":"https://api.github.com/users/saenglert/followers","following_url":"https://api.github.com/users/saenglert/following{/other_user}","gists_url":"https://api.github.com/users/saenglert/gists{/gist_id}","starred_url":"https://api.github.com/users/saenglert/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/saenglert/subscriptions","organizations_url":"https://api.github.com/users/saenglert/orgs","repos_url":"https://api.github.com/users/saenglert/repos","events_url":"https://api.github.com/users/saenglert/events{/privacy}","received_events_url":"https://api.github.com/users/saenglert/received_events","type":"User","site_admin":false},"created_at":"2018-11-13T08:16:17Z","updated_at":"2018-11-13T08:16:17Z","author_association":"NONE","body":"No worries,\r\nbut without a new release these changes won't be pushed out to the NPM and anyone downloading the current package from there will get the build errors."}}
{"actor":{"display_login":"saenglert"}}