{"action":"created","issue":{"url":"https://api.github.com/repos/filipedeschamps/cep-promise/issues/132","repository_url":"https://api.github.com/repos/filipedeschamps/cep-promise","labels_url":"https://api.github.com/repos/filipedeschamps/cep-promise/issues/132/labels{/name}","comments_url":"https://api.github.com/repos/filipedeschamps/cep-promise/issues/132/comments","events_url":"https://api.github.com/repos/filipedeschamps/cep-promise/issues/132/events","html_url":"https://github.com/filipedeschamps/cep-promise/pull/132","id":389853476,"node_id":"MDExOlB1bGxSZXF1ZXN0MjM3NzQ5NjA3","number":132,"title":"chores: fix vulnerabilities","user":{"login":"filipedeschamps","id":4248081,"node_id":"MDQ6VXNlcjQyNDgwODE=","avatar_url":"https://avatars0.githubusercontent.com/u/4248081?v=4","gravatar_id":"","url":"https://api.github.com/users/filipedeschamps","html_url":"https://github.com/filipedeschamps","followers_url":"https://api.github.com/users/filipedeschamps/followers","following_url":"https://api.github.com/users/filipedeschamps/following{/other_user}","gists_url":"https://api.github.com/users/filipedeschamps/gists{/gist_id}","starred_url":"https://api.github.com/users/filipedeschamps/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/filipedeschamps/subscriptions","organizations_url":"https://api.github.com/users/filipedeschamps/orgs","repos_url":"https://api.github.com/users/filipedeschamps/repos","events_url":"https://api.github.com/users/filipedeschamps/events{/privacy}","received_events_url":"https://api.github.com/users/filipedeschamps/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":9,"created_at":"2018-12-11T16:42:46Z","updated_at":"2018-12-11T19:49:36Z","closed_at":null,"author_association":"OWNER","pull_request":{"url":"https://api.github.com/repos/filipedeschamps/cep-promise/pulls/132","html_url":"https://github.com/filipedeschamps/cep-promise/pull/132","diff_url":"https://github.com/filipedeschamps/cep-promise/pull/132.diff","patch_url":"https://github.com/filipedeschamps/cep-promise/pull/132.patch"},"body":"Nenhuma calamidade, dado que são pacotes de desenvolvimento e não expõe os servidores de produção, porém sempre é bom fechar qualquer vetor.\r\n\r\nSegue abaixo o report gerado pelo `npm audit`\r\n\r\n```\r\n                       === npm audit security report ===                        \r\n                                                                                \r\n# Run  npm install --save-dev mocha@5.2.0  to resolve 2 vulnerabilities\r\nSEMVER WARNING: Recommended action is a potentially breaking change\r\n┌───────────────┬──────────────────────────────────────────────────────────────┐\r\n│ Low           │ Regular Expression Denial of Service                         │\r\n├───────────────┼──────────────────────────────────────────────────────────────┤\r\n│ Package       │ debug                                                        │\r\n├───────────────┼──────────────────────────────────────────────────────────────┤\r\n│ Dependency of │ mocha [dev]                                                  │\r\n├───────────────┼──────────────────────────────────────────────────────────────┤\r\n│ Path          │ mocha > debug                                                │\r\n├───────────────┼──────────────────────────────────────────────────────────────┤\r\n│ More info     │ https://nodesecurity.io/advisories/534                       │\r\n└───────────────┴──────────────────────────────────────────────────────────────┘\r\n\r\n\r\n┌───────────────┬──────────────────────────────────────────────────────────────┐\r\n│ Critical      │ Command Injection                                            │\r\n├───────────────┼──────────────────────────────────────────────────────────────┤\r\n│ Package       │ growl                                                        │\r\n├───────────────┼──────────────────────────────────────────────────────────────┤\r\n│ Dependency of │ mocha [dev]                                                  │\r\n├───────────────┼──────────────────────────────────────────────────────────────┤\r\n│ Path          │ mocha > growl                                                │\r\n├───────────────┼──────────────────────────────────────────────────────────────┤\r\n│ More info     │ https://nodesecurity.io/advisories/146                       │\r\n└───────────────┴──────────────────────────────────────────────────────────────┘\r\n\r\n\r\n# Run  npm install --save-dev babel-istanbul@0.12.2  to resolve 1 vulnerability\r\n┌───────────────┬──────────────────────────────────────────────────────────────┐\r\n│ High          │ Regular Expression Denial of Service                         │\r\n├───────────────┼──────────────────────────────────────────────────────────────┤\r\n│ Package       │ minimatch                                                    │\r\n├───────────────┼──────────────────────────────────────────────────────────────┤\r\n│ Dependency of │ babel-istanbul [dev]                                         │\r\n├───────────────┼──────────────────────────────────────────────────────────────┤\r\n│ Path          │ babel-istanbul > fileset > minimatch                         │\r\n├───────────────┼──────────────────────────────────────────────────────────────┤\r\n│ More info     │ https://nodesecurity.io/advisories/118                       │\r\n└───────────────┴──────────────────────────────────────────────────────────────┘\r\n\r\n\r\n# Run  npm install --save-dev nock@10.0.4  to resolve 1 vulnerability\r\nSEMVER WARNING: Recommended action is a potentially breaking change\r\n┌───────────────┬──────────────────────────────────────────────────────────────┐\r\n│ Low           │ Prototype Pollution                                          │\r\n├───────────────┼──────────────────────────────────────────────────────────────┤\r\n│ Package       │ lodash                                                       │\r\n├───────────────┼──────────────────────────────────────────────────────────────┤\r\n│ Dependency of │ nock [dev]                                                   │\r\n├───────────────┼──────────────────────────────────────────────────────────────┤\r\n│ Path          │ nock > lodash                                                │\r\n├───────────────┼──────────────────────────────────────────────────────────────┤\r\n│ More info     │ https://nodesecurity.io/advisories/577                       │\r\n└───────────────┴──────────────────────────────────────────────────────────────┘\r\n\r\n\r\nfound 4 vulnerabilities (2 low, 1 high, 1 critical) in 3395 scanned packages\r\n  run `npm audit fix` to fix 1 of them.\r\n  3 vulnerabilities require semver-major dependency updates.\r\n```"},"comment":{"url":"https://api.github.com/repos/filipedeschamps/cep-promise/issues/comments/446337795","html_url":"https://github.com/filipedeschamps/cep-promise/pull/132#issuecomment-446337795","issue_url":"https://api.github.com/repos/filipedeschamps/cep-promise/issues/132","id":446337795,"node_id":"MDEyOklzc3VlQ29tbWVudDQ0NjMzNzc5NQ==","user":{"login":"otaviopace","id":15306309,"node_id":"MDQ6VXNlcjE1MzA2MzA5","avatar_url":"https://avatars1.githubusercontent.com/u/15306309?v=4","gravatar_id":"","url":"https://api.github.com/users/otaviopace","html_url":"https://github.com/otaviopace","followers_url":"https://api.github.com/users/otaviopace/followers","following_url":"https://api.github.com/users/otaviopace/following{/other_user}","gists_url":"https://api.github.com/users/otaviopace/gists{/gist_id}","starred_url":"https://api.github.com/users/otaviopace/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/otaviopace/subscriptions","organizations_url":"https://api.github.com/users/otaviopace/orgs","repos_url":"https://api.github.com/users/otaviopace/repos","events_url":"https://api.github.com/users/otaviopace/events{/privacy}","received_events_url":"https://api.github.com/users/otaviopace/received_events","type":"User","site_admin":false},"created_at":"2018-12-11T19:49:36Z","updated_at":"2018-12-11T19:49:36Z","author_association":"CONTRIBUTOR","body":"Boooooaaa @lucianopf !!!!!!"}}
{"actor":{"display_login":"otaviopace"}}