{"action":"created","issue":{"url":"https://api.github.com/repos/BryanWilhite/nodejs/issues/11","repository_url":"https://api.github.com/repos/BryanWilhite/nodejs","labels_url":"https://api.github.com/repos/BryanWilhite/nodejs/issues/11/labels{/name}","comments_url":"https://api.github.com/repos/BryanWilhite/nodejs/issues/11/comments","events_url":"https://api.github.com/repos/BryanWilhite/nodejs/issues/11/events","html_url":"https://github.com/BryanWilhite/nodejs/issues/11","id":364685357,"node_id":"MDU6SXNzdWUzNjQ2ODUzNTc=","number":11,"title":"npm audit/outdated log","user":{"login":"BryanWilhite","id":5226627,"node_id":"MDQ6VXNlcjUyMjY2Mjc=","avatar_url":"https://avatars0.githubusercontent.com/u/5226627?v=4","gravatar_id":"","url":"https://api.github.com/users/BryanWilhite","html_url":"https://github.com/BryanWilhite","followers_url":"https://api.github.com/users/BryanWilhite/followers","following_url":"https://api.github.com/users/BryanWilhite/following{/other_user}","gists_url":"https://api.github.com/users/BryanWilhite/gists{/gist_id}","starred_url":"https://api.github.com/users/BryanWilhite/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/BryanWilhite/subscriptions","organizations_url":"https://api.github.com/users/BryanWilhite/orgs","repos_url":"https://api.github.com/users/BryanWilhite/repos","events_url":"https://api.github.com/users/BryanWilhite/events{/privacy}","received_events_url":"https://api.github.com/users/BryanWilhite/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":{"login":"BryanWilhite","id":5226627,"node_id":"MDQ6VXNlcjUyMjY2Mjc=","avatar_url":"https://avatars0.githubusercontent.com/u/5226627?v=4","gravatar_id":"","url":"https://api.github.com/users/BryanWilhite","html_url":"https://github.com/BryanWilhite","followers_url":"https://api.github.com/users/BryanWilhite/followers","following_url":"https://api.github.com/users/BryanWilhite/following{/other_user}","gists_url":"https://api.github.com/users/BryanWilhite/gists{/gist_id}","starred_url":"https://api.github.com/users/BryanWilhite/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/BryanWilhite/subscriptions","organizations_url":"https://api.github.com/users/BryanWilhite/orgs","repos_url":"https://api.github.com/users/BryanWilhite/repos","events_url":"https://api.github.com/users/BryanWilhite/events{/privacy}","received_events_url":"https://api.github.com/users/BryanWilhite/received_events","type":"User","site_admin":false},"assignees":[{"login":"BryanWilhite","id":5226627,"node_id":"MDQ6VXNlcjUyMjY2Mjc=","avatar_url":"https://avatars0.githubusercontent.com/u/5226627?v=4","gravatar_id":"","url":"https://api.github.com/users/BryanWilhite","html_url":"https://github.com/BryanWilhite","followers_url":"https://api.github.com/users/BryanWilhite/followers","following_url":"https://api.github.com/users/BryanWilhite/following{/other_user}","gists_url":"https://api.github.com/users/BryanWilhite/gists{/gist_id}","starred_url":"https://api.github.com/users/BryanWilhite/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/BryanWilhite/subscriptions","organizations_url":"https://api.github.com/users/BryanWilhite/orgs","repos_url":"https://api.github.com/users/BryanWilhite/repos","events_url":"https://api.github.com/users/BryanWilhite/events{/privacy}","received_events_url":"https://api.github.com/users/BryanWilhite/received_events","type":"User","site_admin":false}],"milestone":null,"comments":9,"created_at":"2018-09-27T23:10:02Z","updated_at":"2018-09-28T01:27:16Z","closed_at":null,"author_association":"OWNER","body":"`angular.io-official`:\r\n\r\n```console\r\n\r\n                       === npm audit security report ===\r\n\r\n# Run  npm install npm@6.4.1  to resolve 20 vulnerabilities\r\n\r\n  Moderate        Prototype pollution\r\n\r\n  Package         hoek\r\n\r\n  Dependency of   npm\r\n\r\n  Path            npm > libcipm > npm-lifecycle > node-gyp > request > hawk >\r\n                  boom > hoek\r\n\r\n  More info       https://nodesecurity.io/advisories/566\r\n\r\n\r\n\r\n\r\n  Moderate        Prototype pollution\r\n\r\n  Package         hoek\r\n\r\n  Dependency of   npm\r\n\r\n  Path            npm > libcipm > npm-lifecycle > node-gyp > request > hawk >\r\n                  cryptiles > boom > hoek\r\n\r\n  More info       https://nodesecurity.io/advisories/566\r\n\r\n\r\n\r\n\r\n  Moderate        Prototype pollution\r\n\r\n  Package         hoek\r\n\r\n  Dependency of   npm\r\n\r\n  Path            npm > libcipm > npm-lifecycle > node-gyp > request > hawk >\r\n                  hoek\r\n\r\n  More info       https://nodesecurity.io/advisories/566\r\n\r\n\r\n\r\n\r\n  Moderate        Prototype pollution\r\n\r\n  Package         hoek\r\n\r\n  Dependency of   npm\r\n\r\n  Path            npm > libcipm > npm-lifecycle > node-gyp > request > hawk >\r\n                  sntp > hoek\r\n\r\n  More info       https://nodesecurity.io/advisories/566\r\n\r\n\r\n\r\n\r\n  Moderate        Prototype pollution\r\n\r\n  Package         hoek\r\n\r\n  Dependency of   npm\r\n\r\n  Path            npm > node-gyp > request > hawk > boom > hoek\r\n\r\n  More info       https://nodesecurity.io/advisories/566\r\n\r\n\r\n\r\n\r\n  Moderate        Prototype pollution\r\n\r\n  Package         hoek\r\n\r\n  Dependency of   npm\r\n\r\n  Path            npm > node-gyp > request > hawk > cryptiles > boom > hoek\r\n\r\n  More info       https://nodesecurity.io/advisories/566\r\n\r\n\r\n\r\n\r\n  Moderate        Prototype pollution\r\n\r\n  Package         hoek\r\n\r\n  Dependency of   npm\r\n\r\n  Path            npm > node-gyp > request > hawk > hoek\r\n\r\n  More info       https://nodesecurity.io/advisories/566\r\n\r\n\r\n\r\n\r\n  Moderate        Prototype pollution\r\n\r\n  Package         hoek\r\n\r\n  Dependency of   npm\r\n\r\n  Path            npm > node-gyp > request > hawk > sntp > hoek\r\n\r\n  More info       https://nodesecurity.io/advisories/566\r\n\r\n\r\n\r\n\r\n  Moderate        Prototype pollution\r\n\r\n  Package         hoek\r\n\r\n  Dependency of   npm\r\n\r\n  Path            npm > npm-lifecycle > node-gyp > request > hawk > boom >\r\n                  hoek\r\n\r\n  More info       https://nodesecurity.io/advisories/566\r\n\r\n\r\n\r\n\r\n  Moderate        Prototype pollution\r\n\r\n  Package         hoek\r\n\r\n  Dependency of   npm\r\n\r\n  Path            npm > npm-lifecycle > node-gyp > request > hawk > cryptiles\r\n                  > boom > hoek\r\n\r\n  More info       https://nodesecurity.io/advisories/566\r\n\r\n\r\n\r\n\r\n  Moderate        Prototype pollution\r\n\r\n  Package         hoek\r\n\r\n  Dependency of   npm\r\n\r\n  Path            npm > npm-lifecycle > node-gyp > request > hawk > hoek\r\n\r\n  More info       https://nodesecurity.io/advisories/566\r\n\r\n\r\n\r\n\r\n  Moderate        Prototype pollution\r\n\r\n  Package         hoek\r\n\r\n  Dependency of   npm\r\n\r\n  Path            npm > npm-lifecycle > node-gyp > request > hawk > sntp >\r\n                  hoek\r\n\r\n  More info       https://nodesecurity.io/advisories/566\r\n\r\n\r\n\r\n\r\n  Moderate        Prototype pollution\r\n\r\n  Package         hoek\r\n\r\n  Dependency of   npm\r\n\r\n  Path            npm > npm-registry-client > request > hawk > boom > hoek\r\n\r\n  More info       https://nodesecurity.io/advisories/566\r\n\r\n\r\n\r\n\r\n  Moderate        Prototype pollution\r\n\r\n  Package         hoek\r\n\r\n  Dependency of   npm\r\n\r\n  Path            npm > npm-registry-client > request > hawk > cryptiles >\r\n                  boom > hoek\r\n\r\n  More info       https://nodesecurity.io/advisories/566\r\n\r\n\r\n\r\n\r\n  Moderate        Prototype pollution\r\n\r\n  Package         hoek\r\n\r\n  Dependency of   npm\r\n\r\n  Path            npm > npm-registry-client > request > hawk > hoek\r\n\r\n  More info       https://nodesecurity.io/advisories/566\r\n\r\n\r\n\r\n\r\n  Moderate        Prototype pollution\r\n\r\n  Package         hoek\r\n\r\n  Dependency of   npm\r\n\r\n  Path            npm > npm-registry-client > request > hawk > sntp > hoek\r\n\r\n  More info       https://nodesecurity.io/advisories/566\r\n\r\n\r\n\r\n\r\n  Moderate        Prototype pollution\r\n\r\n  Package         hoek\r\n\r\n  Dependency of   npm\r\n\r\n  Path            npm > request > hawk > boom > hoek\r\n\r\n  More info       https://nodesecurity.io/advisories/566\r\n\r\n\r\n\r\n\r\n  Moderate        Prototype pollution\r\n\r\n  Package         hoek\r\n\r\n  Dependency of   npm\r\n\r\n  Path            npm > request > hawk > cryptiles > boom > hoek\r\n\r\n  More info       https://nodesecurity.io/advisories/566\r\n\r\n\r\n\r\n\r\n  Moderate        Prototype pollution\r\n\r\n  Package         hoek\r\n\r\n  Dependency of   npm\r\n\r\n  Path            npm > request > hawk > hoek\r\n\r\n  More info       https://nodesecurity.io/advisories/566\r\n\r\n\r\n\r\n\r\n  Moderate        Prototype pollution\r\n\r\n  Package         hoek\r\n\r\n  Dependency of   npm\r\n\r\n  Path            npm > request > hawk > sntp > hoek\r\n\r\n  More info       https://nodesecurity.io/advisories/566\r\n\r\n\r\n\r\n# Run  npm install --save-dev @angular/cli@6.2.3  to resolve 25 vulnerabilities\r\nSEMVER WARNING: Recommended action is a potentially breaking change\r\n\r\n  Low             Incorrect Handling of Non-Boolean Comparisons During\r\n                  Minification\r\n\r\n  Package         uglify-js\r\n\r\n  Dependency of   @angular/cli [dev]\r\n\r\n  Path            @angular/cli > postcss-url > directory-encoder > handlebars\r\n                  > uglify-js\r\n\r\n  More info       https://nodesecurity.io/advisories/39\r\n\r\n\r\n\r\n\r\n  Low             Regular Expression Denial of Service\r\n\r\n  Package         uglify-js\r\n\r\n  Dependency of   @angular/cli [dev]\r\n\r\n  Path            @angular/cli > postcss-url > directory-encoder > handlebars\r\n                  > uglify-js\r\n\r\n  More info       https://nodesecurity.io/advisories/48\r\n\r\n\r\n\r\n\r\n  Moderate        Regular Expression Denial of Service\r\n\r\n  Package         mime\r\n\r\n  Dependency of   @angular/cli [dev]\r\n\r\n  Path            @angular/cli > url-loader > mime\r\n\r\n  More info       https://nodesecurity.io/advisories/535\r\n\r\n\r\n\r\n\r\n  High            Cross-Site Scripting\r\n\r\n  Package         handlebars\r\n\r\n  Dependency of   @angular/cli [dev]\r\n\r\n  Path            @angular/cli > postcss-url > directory-encoder > handlebars\r\n\r\n  More info       https://nodesecurity.io/advisories/61\r\n\r\n\r\n\r\n\r\n  Low             Regular Expression Denial of Service\r\n\r\n  Package         debug\r\n\r\n  Dependency of   @angular/cli [dev]\r\n\r\n  Path            @angular/cli > webpack-dev-server > compression > debug\r\n\r\n  More info       https://nodesecurity.io/advisories/534\r\n\r\n\r\n\r\n\r\n  Low             Regular Expression Denial of Service\r\n\r\n  Package         debug\r\n\r\n  Dependency of   @angular/cli [dev]\r\n\r\n  Path            @angular/cli > webpack-dev-server > serve-index > debug\r\n\r\n  More info       https://nodesecurity.io/advisories/534\r\n\r\n\r\n\r\n\r\n  Low             Regular Expression Denial of Service\r\n\r\n  Package         debug\r\n\r\n  Dependency of   @angular/cli [dev]\r\n\r\n  Path            @angular/cli > webpack-dev-server > express > debug\r\n\r\n  More info       https://nodesecurity.io/advisories/534\r\n\r\n\r\n\r\n\r\n  Low             Regular Expression Denial of Service\r\n\r\n  Package         debug\r\n\r\n  Dependency of   @angular/cli [dev]\r\n\r\n  Path            @angular/cli > webpack-dev-server > express > finalhandler >\r\n                  debug\r\n\r\n  More info       https://nodesecurity.io/advisories/534\r\n\r\n\r\n\r\n\r\n  Low             Regular Expression Denial of Service\r\n\r\n  Package         debug\r\n\r\n  Dependency of   @angular/cli [dev]\r\n\r\n  Path            @angular/cli > webpack-dev-server > express > send > debug\r\n\r\n  More info       https://nodesecurity.io/advisories/534\r\n\r\n\r\n\r\n\r\n  Low             Regular Expression Denial of Service\r\n\r\n  Package         debug\r\n\r\n  Dependency of   @angular/cli [dev]\r\n\r\n  Path            @angular/cli > webpack-dev-server > express > serve-static >\r\n                  send > debug\r\n\r\n  More info       https://nodesecurity.io/advisories/534\r\n\r\n\r\n\r\n\r\n  Critical        Command Injection\r\n\r\n  Package         macaddress\r\n\r\n  Dependency of   @angular/cli [dev]\r\n\r\n  Path            @angular/cli > css-loader > cssnano > postcss-filter-plugins\r\n                  > uniqid > macaddress\r\n\r\n  More info       https://nodesecurity.io/advisories/654\r\n\r\n\r\n\r\n\r\n  Critical        Command Injection\r\n\r\n  Package         macaddress\r\n\r\n  Dependency of   @angular/cli [dev]\r\n\r\n  Path            @angular/cli > cssnano > postcss-filter-plugins > uniqid >\r\n                  macaddress\r\n\r\n  More info       https://nodesecurity.io/advisories/654\r\n\r\n\r\n\r\n\r\n  High            Regular Expression Denial of Service\r\n\r\n  Package         no-case\r\n\r\n  Dependency of   @angular/cli [dev]\r\n\r\n  Path            @angular/cli > html-webpack-plugin > html-minifier >\r\n                  camel-case > no-case\r\n\r\n  More info       https://nodesecurity.io/advisories/529\r\n\r\n\r\n\r\n\r\n  High            Regular Expression Denial of Service\r\n\r\n  Package         no-case\r\n\r\n  Dependency of   @angular/cli [dev]\r\n\r\n  Path            @angular/cli > html-webpack-plugin > html-minifier >\r\n                  param-case > no-case\r\n\r\n  More info       https://nodesecurity.io/advisories/529\r\n\r\n\r\n\r\n\r\n  Moderate        Regular Expression Denial of Service\r\n\r\n  Package         mime\r\n\r\n  Dependency of   @angular/cli [dev]\r\n\r\n  Path            @angular/cli > webpack-dev-server > express > send > mime\r\n\r\n  More info       https://nodesecurity.io/advisories/535\r\n\r\n\r\n\r\n\r\n  Moderate        Regular Expression Denial of Service\r\n\r\n  Package         mime\r\n\r\n  Dependency of   @angular/cli [dev]\r\n\r\n  Path            @angular/cli > webpack-dev-server > express > serve-static >\r\n                  send > mime\r\n\r\n  More info       https://nodesecurity.io/advisories/535\r\n\r\n\r\n\r\n\r\n  Low             Cryptographically Weak PRNG\r\n\r\n  Package         randomatic\r\n\r\n  Dependency of   @angular/cli [dev]\r\n\r\n  Path            @angular/cli > webpack > watchpack > chokidar > anymatch >\r\n                  micromatch > braces > expand-range > fill-range > randomatic\r\n\r\n  More info       https://nodesecurity.io/advisories/157\r\n\r\n\r\n\r\n\r\n  Low             Cryptographically Weak PRNG\r\n\r\n  Package         randomatic\r\n\r\n  Dependency of   @angular/cli [dev]\r\n\r\n  Path            @angular/cli > webpack-dev-server > chokidar > anymatch >\r\n                  micromatch > braces > expand-range > fill-range > randomatic\r\n\r\n  More info       https://nodesecurity.io/advisories/157\r\n\r\n\r\n\r\n\r\n  Low             Cryptographically Weak PRNG\r\n\r\n  Package         randomatic\r\n\r\n  Dependency of   @angular/cli [dev]\r\n\r\n  Path            @angular/cli > webpack-dev-server > http-proxy-middleware >\r\n                  micromatch > braces > expand-range > fill-range > randomatic\r\n\r\n  More info       https://nodesecurity.io/advisories/157\r\n\r\n\r\n\r\n\r\n  High            Regular Expression Denial of Service\r\n\r\n  Package         fresh\r\n\r\n  Dependency of   @angular/cli [dev]\r\n\r\n  Path            @angular/cli > webpack-dev-server > express > fresh\r\n\r\n  More info       https://nodesecurity.io/advisories/526\r\n\r\n\r\n\r\n\r\n  High            Regular Expression Denial of Service\r\n\r\n  Package         fresh\r\n\r\n  Dependency of   @angular/cli [dev]\r\n\r\n  Path            @angular/cli > webpack-dev-server > express > send > fresh\r\n\r\n  More info       https://nodesecurity.io/advisories/526\r\n\r\n\r\n\r\n\r\n  High            Regular Expression Denial of Service\r\n\r\n  Package         fresh\r\n\r\n  Dependency of   @angular/cli [dev]\r\n\r\n  Path            @angular/cli > webpack-dev-server > express > serve-static >\r\n                  send > fresh\r\n\r\n  More info       https://nodesecurity.io/advisories/526\r\n\r\n\r\n\r\n\r\n  High            Regular Expression Denial of Service\r\n\r\n  Package         forwarded\r\n\r\n  Dependency of   @angular/cli [dev]\r\n\r\n  Path            @angular/cli > webpack-dev-server > express > proxy-addr >\r\n                  forwarded\r\n\r\n  More info       https://nodesecurity.io/advisories/527\r\n\r\n\r\n\r\n\r\n  High            Open Redirect\r\n\r\n  Package         url-parse\r\n\r\n  Dependency of   @angular/cli [dev]\r\n\r\n  Path            @angular/cli > webpack-dev-server > sockjs-client >\r\n                  eventsource > original > url-parse\r\n\r\n  More info       https://nodesecurity.io/advisories/678\r\n\r\n\r\n\r\n\r\n  High            Open Redirect\r\n\r\n  Package         url-parse\r\n\r\n  Dependency of   @angular/cli [dev]\r\n\r\n  Path            @angular/cli > webpack-dev-server > sockjs-client >\r\n                  url-parse\r\n\r\n  More info       https://nodesecurity.io/advisories/678\r\n\r\n\r\n\r\n# Run  npm install karma@3.0.0  to resolve 7 vulnerabilities\r\nSEMVER WARNING: Recommended action is a potentially breaking change\r\n\r\n  Moderate        Prototype pollution\r\n\r\n  Package         hoek\r\n\r\n  Dependency of   karma\r\n\r\n  Path            karma > log4js > loggly > request > hawk > boom > hoek\r\n\r\n  More info       https://nodesecurity.io/advisories/566\r\n\r\n\r\n\r\n\r\n  Moderate        Prototype pollution\r\n\r\n  Package         hoek\r\n\r\n  Dependency of   karma\r\n\r\n  Path            karma > log4js > loggly > request > hawk > cryptiles > boom\r\n                  > hoek\r\n\r\n  More info       https://nodesecurity.io/advisories/566\r\n\r\n\r\n\r\n\r\n  Moderate        Prototype pollution\r\n\r\n  Package         hoek\r\n\r\n  Dependency of   karma\r\n\r\n  Path            karma > log4js > loggly > request > hawk > hoek\r\n\r\n  More info       https://nodesecurity.io/advisories/566\r\n\r\n\r\n\r\n\r\n  Moderate        Prototype pollution\r\n\r\n  Package         hoek\r\n\r\n  Dependency of   karma\r\n\r\n  Path            karma > log4js > loggly > request > hawk > sntp > hoek\r\n\r\n  More info       https://nodesecurity.io/advisories/566\r\n\r\n\r\n\r\n\r\n  Moderate        Memory Exposure\r\n\r\n  Package         tunnel-agent\r\n\r\n  Dependency of   karma [dev]\r\n\r\n  Path            karma > log4js > loggly > request > tunnel-agent\r\n\r\n  More info       https://nodesecurity.io/advisories/598\r\n\r\n\r\n\r\n\r\n  Low             Regular Expression Denial of Service\r\n\r\n  Package         timespan\r\n\r\n  Dependency of   karma [dev]\r\n\r\n  Path            karma > log4js > loggly > timespan\r\n\r\n  More info       https://nodesecurity.io/advisories/533\r\n\r\n\r\n\r\n\r\n  Moderate        Out-of-bounds Read\r\n\r\n  Package         stringstream\r\n\r\n  Dependency of   karma [dev]\r\n\r\n  Path            karma > log4js > loggly > request > stringstream\r\n\r\n  More info       https://nodesecurity.io/advisories/664\r\n\r\n\r\n\r\nfound 52 vulnerabilities (12 low, 29 moderate, 9 high, 2 critical) in 11147 scanned packages\r\n  run `npm audit fix` to fix 20 of them.\r\n  32 vulnerabilities require semver-major dependency updates.\r\n```"},"comment":{"url":"https://api.github.com/repos/BryanWilhite/nodejs/issues/comments/425291489","html_url":"https://github.com/BryanWilhite/nodejs/issues/11#issuecomment-425291489","issue_url":"https://api.github.com/repos/BryanWilhite/nodejs/issues/11","id":425291489,"node_id":"MDEyOklzc3VlQ29tbWVudDQyNTI5MTQ4OQ==","user":{"login":"BryanWilhite","id":5226627,"node_id":"MDQ6VXNlcjUyMjY2Mjc=","avatar_url":"https://avatars0.githubusercontent.com/u/5226627?v=4","gravatar_id":"","url":"https://api.github.com/users/BryanWilhite","html_url":"https://github.com/BryanWilhite","followers_url":"https://api.github.com/users/BryanWilhite/followers","following_url":"https://api.github.com/users/BryanWilhite/following{/other_user}","gists_url":"https://api.github.com/users/BryanWilhite/gists{/gist_id}","starred_url":"https://api.github.com/users/BryanWilhite/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/BryanWilhite/subscriptions","organizations_url":"https://api.github.com/users/BryanWilhite/orgs","repos_url":"https://api.github.com/users/BryanWilhite/repos","events_url":"https://api.github.com/users/BryanWilhite/events{/privacy}","received_events_url":"https://api.github.com/users/BryanWilhite/received_events","type":"User","site_admin":false},"created_at":"2018-09-28T01:27:16Z","updated_at":"2018-09-28T01:27:16Z","author_association":"OWNER","body":"for `svg-and-object-element` this issue repeats about 20 times and will not go away:\r\n\r\n```console\r\nHigh            Regular Expression Denial of Service\r\n\r\n  Package         minimatch\r\n\r\n  Dependency of   svg-to-png [dev]\r\n\r\n  Path            svg-to-png > imagemin > imagemin-jpegtran > jpegtran-bin >\r\n                  bin-wrapper > download > gulp-decompress > decompress >\r\n                  vinyl-fs > glob-stream > glob > minimatch\r\n\r\n  More info       https://nodesecurity.io/advisories/118\r\n```"}}
{"actor":{"display_login":"BryanWilhite"}}