{"action":"opened","issue":{"url":"https://api.github.com/repos/pouchdb/pouchdb-server/issues/329","repository_url":"https://api.github.com/repos/pouchdb/pouchdb-server","labels_url":"https://api.github.com/repos/pouchdb/pouchdb-server/issues/329/labels{/name}","comments_url":"https://api.github.com/repos/pouchdb/pouchdb-server/issues/329/comments","events_url":"https://api.github.com/repos/pouchdb/pouchdb-server/issues/329/events","html_url":"https://github.com/pouchdb/pouchdb-server/issues/329","id":328745727,"node_id":"MDU6SXNzdWUzMjg3NDU3Mjc=","number":329,"title":"greenkeeper pr's failing ","user":{"login":"seriousme","id":3322396,"node_id":"MDQ6VXNlcjMzMjIzOTY=","avatar_url":"https://avatars3.githubusercontent.com/u/3322396?v=4","gravatar_id":"","url":"https://api.github.com/users/seriousme","html_url":"https://github.com/seriousme","followers_url":"https://api.github.com/users/seriousme/followers","following_url":"https://api.github.com/users/seriousme/following{/other_user}","gists_url":"https://api.github.com/users/seriousme/gists{/gist_id}","starred_url":"https://api.github.com/users/seriousme/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/seriousme/subscriptions","organizations_url":"https://api.github.com/users/seriousme/orgs","repos_url":"https://api.github.com/users/seriousme/repos","events_url":"https://api.github.com/users/seriousme/events{/privacy}","received_events_url":"https://api.github.com/users/seriousme/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-06-02T13:49:01Z","updated_at":"2018-06-02T13:49:01Z","closed_at":null,"author_association":"NONE","body":"Hi,\r\n\r\nI noticed that there are 10 PR's created by greenkeeper waiting for merge.\r\nI looked at some of them and they seem to show red because Travis had no access to the most recent version of the dependency at the time of PR creation. I had the same issue in some of my repo's some time ago and just asking Travis to rebuild solved the issue for me.\r\n\r\nThe reason for creating the issue is that NPM audit keeps complaining about vulnerable dependencies of pouchdb-server :-(\r\n\r\nMost notably:  \r\n```\r\n  High            Regular Expression Denial of Service\r\n  Package         sshpk\r\n  Dependency of   pouchdb-server\r\n  Path            pouchdb-server > pouchdb-adapter-node-websql > websql >\r\n                  sqlite3 > node-pre-gyp > request > http-signature > sshpk\r\n  More info       https://nodesecurity.io/advisories/606\r\n```\r\nFixed by: https://github.com/pouchdb/pouchdb-server/pull/313\r\n\r\n```\r\n  High            Regular Expression Denial of Service\r\n  Package         fresh\r\n  Patched in      >= 0.5.2\r\n  Dependency of   pouchdb-server\r\n  Path            pouchdb-server > serve-favicon > fresh\r\n  More info       https://nodesecurity.io/advisories/526\r\n```\r\nFixed by: https://github.com/pouchdb/pouchdb-server/pull/315\r\n\r\nFixing these would be much appreciated.\r\n\r\nKind regards,\r\nHans"}}
{"actor":{"display_login":"seriousme"}}