{"action":"created","issue":{"url":"https://api.github.com/repos/twbs/bootstrap/issues/26494","repository_url":"https://api.github.com/repos/twbs/bootstrap","labels_url":"https://api.github.com/repos/twbs/bootstrap/issues/26494/labels{/name}","comments_url":"https://api.github.com/repos/twbs/bootstrap/issues/26494/comments","events_url":"https://api.github.com/repos/twbs/bootstrap/issues/26494/events","html_url":"https://github.com/twbs/bootstrap/issues/26494","id":322410215,"number":26494,"title":"3 vulnerabilities found","user":{"login":"Limoli","id":5011711,"avatar_url":"https://avatars3.githubusercontent.com/u/5011711?v=4","gravatar_id":"","url":"https://api.github.com/users/Limoli","html_url":"https://github.com/Limoli","followers_url":"https://api.github.com/users/Limoli/followers","following_url":"https://api.github.com/users/Limoli/following{/other_user}","gists_url":"https://api.github.com/users/Limoli/gists{/gist_id}","starred_url":"https://api.github.com/users/Limoli/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Limoli/subscriptions","organizations_url":"https://api.github.com/users/Limoli/orgs","repos_url":"https://api.github.com/users/Limoli/repos","events_url":"https://api.github.com/users/Limoli/events{/privacy}","received_events_url":"https://api.github.com/users/Limoli/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-05-11T19:34:18Z","updated_at":"2018-05-11T21:10:35Z","closed_at":null,"author_association":"NONE","body":"I have simply created a new react app:\r\n```\r\nnpm install -g create-react-app\r\ncreate-react-app my-app\r\ncd my-app/\r\n```\r\nWhen I try to install bootstrap version 4.1.1\r\n```\r\nnpm install --save bootstrap@4.1.1\r\n+ bootstrap@4.1.1\r\nadded 197 packages from 158 contributors, removed 181 packages and updated 1076 packages in 44.565s\r\n[!] 3 vulnerabilities found [14375 packages audited]\r\n    Severity: 3 Low\r\n    Run `npm audit` for more detail\r\n```\r\n<img width=\"596\" alt=\"screen shot 2018-05-11 at 21 09 29\" src=\"https://user-images.githubusercontent.com/5011711/39943389-f6a4ed16-5562-11e8-952d-a758eabacd8d.png\">\r\n"},"comment":{"url":"https://api.github.com/repos/twbs/bootstrap/issues/comments/388486597","html_url":"https://github.com/twbs/bootstrap/issues/26494#issuecomment-388486597","issue_url":"https://api.github.com/repos/twbs/bootstrap/issues/26494","id":388486597,"user":{"login":"thatnini","id":1205639,"avatar_url":"https://avatars3.githubusercontent.com/u/1205639?v=4","gravatar_id":"","url":"https://api.github.com/users/thatnini","html_url":"https://github.com/thatnini","followers_url":"https://api.github.com/users/thatnini/followers","following_url":"https://api.github.com/users/thatnini/following{/other_user}","gists_url":"https://api.github.com/users/thatnini/gists{/gist_id}","starred_url":"https://api.github.com/users/thatnini/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/thatnini/subscriptions","organizations_url":"https://api.github.com/users/thatnini/orgs","repos_url":"https://api.github.com/users/thatnini/repos","events_url":"https://api.github.com/users/thatnini/events{/privacy}","received_events_url":"https://api.github.com/users/thatnini/received_events","type":"User","site_admin":false},"created_at":"2018-05-11T21:10:34Z","updated_at":"2018-05-11T21:10:34Z","author_association":"NONE","body":"This isn't a Bootstrap issue, as installing Bootstrap doesn't install react-scripts - if it did, then the security report would say `Dependency of Bootstrap`. (You could also try creating a new app with just Bootstrap to verify)\r\n\r\nYou need to report this at [https://github.com/facebook/create-react-app](https://github.com/facebook/create-react-app) as you've already been [advised](https://github.com/reactstrap/reactstrap/issues/1015#issuecomment-388472422)\r\n\r\nAnd no, I don't have a clue why npm audit didn't say anything when you installed create-react-app but waited until you installed bootstrap, but it is a new feature from npm."}}
{"actor":{"display_login":"thatnini"}}