{"action":"opened","issue":{"url":"https://api.github.com/repos/JadedDragoon/RandomSim/issues/1","repository_url":"https://api.github.com/repos/JadedDragoon/RandomSim","labels_url":"https://api.github.com/repos/JadedDragoon/RandomSim/issues/1/labels{/name}","comments_url":"https://api.github.com/repos/JadedDragoon/RandomSim/issues/1/comments","events_url":"https://api.github.com/repos/JadedDragoon/RandomSim/issues/1/events","html_url":"https://github.com/JadedDragoon/RandomSim/issues/1","id":322474988,"number":1,"title":"node-sqlite3 library has vulnerable dependencies","user":{"login":"JadedDragoon","id":1294429,"avatar_url":"https://avatars2.githubusercontent.com/u/1294429?v=4","gravatar_id":"","url":"https://api.github.com/users/JadedDragoon","html_url":"https://github.com/JadedDragoon","followers_url":"https://api.github.com/users/JadedDragoon/followers","following_url":"https://api.github.com/users/JadedDragoon/following{/other_user}","gists_url":"https://api.github.com/users/JadedDragoon/gists{/gist_id}","starred_url":"https://api.github.com/users/JadedDragoon/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/JadedDragoon/subscriptions","organizations_url":"https://api.github.com/users/JadedDragoon/orgs","repos_url":"https://api.github.com/users/JadedDragoon/repos","events_url":"https://api.github.com/users/JadedDragoon/events{/privacy}","received_events_url":"https://api.github.com/users/JadedDragoon/received_events","type":"User","site_admin":false},"labels":[{"id":927999837,"url":"https://api.github.com/repos/JadedDragoon/RandomSim/labels/bug","name":"bug","color":"d73a4a","default":true}],"state":"open","locked":false,"assignee":{"login":"JadedDragoon","id":1294429,"avatar_url":"https://avatars2.githubusercontent.com/u/1294429?v=4","gravatar_id":"","url":"https://api.github.com/users/JadedDragoon","html_url":"https://github.com/JadedDragoon","followers_url":"https://api.github.com/users/JadedDragoon/followers","following_url":"https://api.github.com/users/JadedDragoon/following{/other_user}","gists_url":"https://api.github.com/users/JadedDragoon/gists{/gist_id}","starred_url":"https://api.github.com/users/JadedDragoon/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/JadedDragoon/subscriptions","organizations_url":"https://api.github.com/users/JadedDragoon/orgs","repos_url":"https://api.github.com/users/JadedDragoon/repos","events_url":"https://api.github.com/users/JadedDragoon/events{/privacy}","received_events_url":"https://api.github.com/users/JadedDragoon/received_events","type":"User","site_admin":false},"assignees":[{"login":"JadedDragoon","id":1294429,"avatar_url":"https://avatars2.githubusercontent.com/u/1294429?v=4","gravatar_id":"","url":"https://api.github.com/users/JadedDragoon","html_url":"https://github.com/JadedDragoon","followers_url":"https://api.github.com/users/JadedDragoon/followers","following_url":"https://api.github.com/users/JadedDragoon/following{/other_user}","gists_url":"https://api.github.com/users/JadedDragoon/gists{/gist_id}","starred_url":"https://api.github.com/users/JadedDragoon/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/JadedDragoon/subscriptions","organizations_url":"https://api.github.com/users/JadedDragoon/orgs","repos_url":"https://api.github.com/users/JadedDragoon/repos","events_url":"https://api.github.com/users/JadedDragoon/events{/privacy}","received_events_url":"https://api.github.com/users/JadedDragoon/received_events","type":"User","site_admin":false}],"milestone":null,"comments":0,"created_at":"2018-05-12T02:17:03Z","updated_at":"2018-05-12T02:17:03Z","closed_at":null,"author_association":"OWNER","body":"RandomSim currently uses the [node-sqlite](https://github.com/kriasoft/node-sqlite) which is a promisifying wrapper for the [node-sqlite3](https://github.com/mapbox/node-sqlite3/) library. The latter uses severely outdated packages and libraries of its own... including several which have been flagged for security vulnerabilities. At least one of the insecure libraries, [deep-extend](https://nodesecurity.io/advisories/612), has proven unresolvable.\r\n\r\nProposed solution: migrate to a better maintained sqlite library or even a different database format. I will need to shop around and test this. \r\n\r\nIn the meantime: The security vulnerability is relatively small and only affects hosted versions of RandomSim... which isn't supported yet. Because of this, I am moving ahead with the release of v1.0.0."}}
{"actor":{"display_login":"JadedDragoon"}}