{"action":"created","issue":{"url":"https://api.github.com/repos/assaf/zombie/issues/1169","repository_url":"https://api.github.com/repos/assaf/zombie","labels_url":"https://api.github.com/repos/assaf/zombie/issues/1169/labels{/name}","comments_url":"https://api.github.com/repos/assaf/zombie/issues/1169/comments","events_url":"https://api.github.com/repos/assaf/zombie/issues/1169/events","html_url":"https://github.com/assaf/zombie/issues/1169","id":349475827,"node_id":"MDU6SXNzdWUzNDk0NzU4Mjc=","number":1169,"title":"Security issue","user":{"login":"lirantal","id":316371,"node_id":"MDQ6VXNlcjMxNjM3MQ==","avatar_url":"https://avatars1.githubusercontent.com/u/316371?v=4","gravatar_id":"","url":"https://api.github.com/users/lirantal","html_url":"https://github.com/lirantal","followers_url":"https://api.github.com/users/lirantal/followers","following_url":"https://api.github.com/users/lirantal/following{/other_user}","gists_url":"https://api.github.com/users/lirantal/gists{/gist_id}","starred_url":"https://api.github.com/users/lirantal/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/lirantal/subscriptions","organizations_url":"https://api.github.com/users/lirantal/orgs","repos_url":"https://api.github.com/users/lirantal/repos","events_url":"https://api.github.com/users/lirantal/events{/privacy}","received_events_url":"https://api.github.com/users/lirantal/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2018-08-10T11:12:24Z","updated_at":"2018-08-10T16:07:03Z","closed_at":null,"author_association":"NONE","body":"Hello,\r\n\r\nAs a member of the [Node.js Security WG](https://hackerone.com/nodejs-ecosystem)\r\nI would like to draw your attention to a security report that has been made regarding this issue.\r\n\r\nI have made attempts to contact the person identified as a maintainer of this package but did not get any answer. What is the best way to reach someone with commit rights over this repo and hopefully npm publishing rights as well, in order to invite them to privately discuss the issue on the HackerOne platform and provide a resolution? \r\n\r\nThanks,\r\nLiran.\r\n\r\nReferences:\r\n* [Node.js Security WG ecosystem vulnerability processes](https://github.com/nodejs/security-wg/blob/master/processes/third_party_vuln_process.md) "},"comment":{"url":"https://api.github.com/repos/assaf/zombie/issues/comments/412129395","html_url":"https://github.com/assaf/zombie/issues/1169#issuecomment-412129395","issue_url":"https://api.github.com/repos/assaf/zombie/issues/1169","id":412129395,"node_id":"MDEyOklzc3VlQ29tbWVudDQxMjEyOTM5NQ==","user":{"login":"vladgurgov","id":771758,"node_id":"MDQ6VXNlcjc3MTc1OA==","avatar_url":"https://avatars1.githubusercontent.com/u/771758?v=4","gravatar_id":"","url":"https://api.github.com/users/vladgurgov","html_url":"https://github.com/vladgurgov","followers_url":"https://api.github.com/users/vladgurgov/followers","following_url":"https://api.github.com/users/vladgurgov/following{/other_user}","gists_url":"https://api.github.com/users/vladgurgov/gists{/gist_id}","starred_url":"https://api.github.com/users/vladgurgov/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/vladgurgov/subscriptions","organizations_url":"https://api.github.com/users/vladgurgov/orgs","repos_url":"https://api.github.com/users/vladgurgov/repos","events_url":"https://api.github.com/users/vladgurgov/events{/privacy}","received_events_url":"https://api.github.com/users/vladgurgov/received_events","type":"User","site_admin":false},"created_at":"2018-08-10T16:07:03Z","updated_at":"2018-08-10T16:07:03Z","author_association":"CONTRIBUTOR","body":"+1"}}
{"actor":{"display_login":"vladgurgov"}}