{"action":"opened","issue":{"url":"https://api.github.com/repos/bitjson/bitcoin-ts/issues/22","repository_url":"https://api.github.com/repos/bitjson/bitcoin-ts","labels_url":"https://api.github.com/repos/bitjson/bitcoin-ts/issues/22/labels{/name}","comments_url":"https://api.github.com/repos/bitjson/bitcoin-ts/issues/22/comments","events_url":"https://api.github.com/repos/bitjson/bitcoin-ts/issues/22/events","html_url":"https://github.com/bitjson/bitcoin-ts/issues/22","id":394069751,"node_id":"MDU6SXNzdWUzOTQwNjk3NTE=","number":22,"title":"Split dev and build dependencies","user":{"login":"madeken","id":36307021,"node_id":"MDQ6VXNlcjM2MzA3MDIx","avatar_url":"https://avatars2.githubusercontent.com/u/36307021?v=4","gravatar_id":"","url":"https://api.github.com/users/madeken","html_url":"https://github.com/madeken","followers_url":"https://api.github.com/users/madeken/followers","following_url":"https://api.github.com/users/madeken/following{/other_user}","gists_url":"https://api.github.com/users/madeken/gists{/gist_id}","starred_url":"https://api.github.com/users/madeken/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/madeken/subscriptions","organizations_url":"https://api.github.com/users/madeken/orgs","repos_url":"https://api.github.com/users/madeken/repos","events_url":"https://api.github.com/users/madeken/events{/privacy}","received_events_url":"https://api.github.com/users/madeken/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-12-26T02:55:54Z","updated_at":"2018-12-26T02:55:54Z","closed_at":null,"author_association":"NONE","body":"I really like what you've done with this library, and would really like to use it to replace some hand-rolled crypto I wrote. My biggest concern however is how to verify the build. \r\n\r\nIf I am not mistaken, the current build process involves at least 1251 unique packages, any of which could potentially subvert the build. \r\n\r\nHowever, fortunately the vast majority of those libraries have no purpose outside of development. I propose that the dependencies are split between those that are essential for reproducing a build, and those for developer convenience.\r\n"}}
{"actor":{"display_login":"madeken"}}