{"action":"created","issue":{"url":"https://api.github.com/repos/builtforme/CodeBnb/issues/34","repository_url":"https://api.github.com/repos/builtforme/CodeBnb","labels_url":"https://api.github.com/repos/builtforme/CodeBnb/issues/34/labels{/name}","comments_url":"https://api.github.com/repos/builtforme/CodeBnb/issues/34/comments","events_url":"https://api.github.com/repos/builtforme/CodeBnb/issues/34/events","html_url":"https://github.com/builtforme/CodeBnb/pull/34","id":337675755,"node_id":"MDExOlB1bGxSZXF1ZXN0MTk4Nzk4MTcw","number":34,"title":"[Snyk] Fix for 1 vulnerable dependencies","user":{"login":"snyk-bot","id":19733683,"node_id":"MDQ6VXNlcjE5NzMzNjgz","avatar_url":"https://avatars2.githubusercontent.com/u/19733683?v=4","gravatar_id":"","url":"https://api.github.com/users/snyk-bot","html_url":"https://github.com/snyk-bot","followers_url":"https://api.github.com/users/snyk-bot/followers","following_url":"https://api.github.com/users/snyk-bot/following{/other_user}","gists_url":"https://api.github.com/users/snyk-bot/gists{/gist_id}","starred_url":"https://api.github.com/users/snyk-bot/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/snyk-bot/subscriptions","organizations_url":"https://api.github.com/users/snyk-bot/orgs","repos_url":"https://api.github.com/users/snyk-bot/repos","events_url":"https://api.github.com/users/snyk-bot/events{/privacy}","received_events_url":"https://api.github.com/users/snyk-bot/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2018-07-02T21:48:39Z","updated_at":"2018-07-02T23:23:08Z","closed_at":null,"author_association":"CONTRIBUTOR","pull_request":{"url":"https://api.github.com/repos/builtforme/CodeBnb/pulls/34","html_url":"https://github.com/builtforme/CodeBnb/pull/34","diff_url":"https://github.com/builtforme/CodeBnb/pull/34.diff","patch_url":"https://github.com/builtforme/CodeBnb/pull/34.patch"},"body":"#### Description\nThis PR fixes one or more vulnerable packages in the `npm` dependencies of this project.\nSee the [Snyk test report](https://snyk.io/test/github/5cb02c6d-9662-4075-8282-75f26bd6cd44/master..snyk-fix-lpjnqv) for more details.\n\n#### Snyk Project: [builtforme/codebnb:package.json](https://snyk.io/org/furchin/project/5cb02c6d-9662-4075-8282-75f26bd6cd44)\n#### Snyk Organization: [Built For Me](https://snyk.io/org/furchin)\n\n#### Changes included in this PR\n\n\n- A Snyk policy (`.snyk`) file, with updated settings.\n\n\n#### Vulnerabilities that will be fixed\n\n##### With a [Snyk patch](https://snyk.io/docs/security/#snyk-s-process-for-creating-patches):\n- [npm:lodash:20180130](https://snyk.io/vuln/npm:lodash:20180130)\n\n\n\nYou can read more about Snyk's upgrade and patch logic in [Snyk's documentation](https://snyk.io/docs/using-snyk/).\n\nCheck the changes in this PR to ensure they won't cause issues with your project.\n\nStay secure,\nThe Snyk team\n\n_**Note**: You are seeing this because you or someone else with access to this repository has authorised Snyk to open Fix PRs. To review the settings for this Snyk project please go to the [project settings page](https://snyk.io/org/furchin/project/5cb02c6d-9662-4075-8282-75f26bd6cd44/settings)._\n\n[//]: # (snyk:metadata:{\"type\":\"auto\",\"packageManager\":\"npm\",\"vulns\":[\"npm:lodash:20180130\"],\"patch\":[\"npm:lodash:20180130\"],\"upgrade\":[],\"isBreakingChange\":false,\"env\":\"prod\"})\n"},"comment":{"url":"https://api.github.com/repos/builtforme/CodeBnb/issues/comments/401966587","html_url":"https://github.com/builtforme/CodeBnb/pull/34#issuecomment-401966587","issue_url":"https://api.github.com/repos/builtforme/CodeBnb/issues/34","id":401966587,"node_id":"MDEyOklzc3VlQ29tbWVudDQwMTk2NjU4Nw==","user":{"login":"JaredReisinger","id":1609572,"node_id":"MDQ6VXNlcjE2MDk1NzI=","avatar_url":"https://avatars0.githubusercontent.com/u/1609572?v=4","gravatar_id":"","url":"https://api.github.com/users/JaredReisinger","html_url":"https://github.com/JaredReisinger","followers_url":"https://api.github.com/users/JaredReisinger/followers","following_url":"https://api.github.com/users/JaredReisinger/following{/other_user}","gists_url":"https://api.github.com/users/JaredReisinger/gists{/gist_id}","starred_url":"https://api.github.com/users/JaredReisinger/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/JaredReisinger/subscriptions","organizations_url":"https://api.github.com/users/JaredReisinger/orgs","repos_url":"https://api.github.com/users/JaredReisinger/repos","events_url":"https://api.github.com/users/JaredReisinger/events{/privacy}","received_events_url":"https://api.github.com/users/JaredReisinger/received_events","type":"User","site_admin":false},"created_at":"2018-07-02T23:23:08Z","updated_at":"2018-07-02T23:23:08Z","author_association":"NONE","body":"Did any of us instigate using snyk.io in the first place?  If not, I would reject this on principle, even if this was the best vulnerability patching tool in the world.\r\n\r\nThat said, I think that snyk itself performs an \"iin-place\" patch of lodash based on the link (https://snyk.io/vuln/npm:lodash:20180130) in the PR... so adding snyk as a dependency _may_ actually fix a theoretical vulnerability."}}
{"actor":{"display_login":"JaredReisinger"}}