{"action":"created","issue":{"url":"https://api.github.com/repos/k1LoW/serverless-s3-sync/issues/30","repository_url":"https://api.github.com/repos/k1LoW/serverless-s3-sync","labels_url":"https://api.github.com/repos/k1LoW/serverless-s3-sync/issues/30/labels{/name}","comments_url":"https://api.github.com/repos/k1LoW/serverless-s3-sync/issues/30/comments","events_url":"https://api.github.com/repos/k1LoW/serverless-s3-sync/issues/30/events","html_url":"https://github.com/k1LoW/serverless-s3-sync/pull/30","id":435493883,"node_id":"MDExOlB1bGxSZXF1ZXN0MjcyMjA1Njg0","number":30,"title":"Updated dependencies to fix mime package vulnerability","user":{"login":"tobilg","id":1841985,"node_id":"MDQ6VXNlcjE4NDE5ODU=","avatar_url":"https://avatars3.githubusercontent.com/u/1841985?v=4","gravatar_id":"","url":"https://api.github.com/users/tobilg","html_url":"https://github.com/tobilg","followers_url":"https://api.github.com/users/tobilg/followers","following_url":"https://api.github.com/users/tobilg/following{/other_user}","gists_url":"https://api.github.com/users/tobilg/gists{/gist_id}","starred_url":"https://api.github.com/users/tobilg/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tobilg/subscriptions","organizations_url":"https://api.github.com/users/tobilg/orgs","repos_url":"https://api.github.com/users/tobilg/repos","events_url":"https://api.github.com/users/tobilg/events{/privacy}","received_events_url":"https://api.github.com/users/tobilg/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2019-04-21T09:53:31Z","updated_at":"2019-04-22T16:17:26Z","closed_at":"2019-04-22T09:14:56Z","author_association":"CONTRIBUTOR","pull_request":{"url":"https://api.github.com/repos/k1LoW/serverless-s3-sync/pulls/30","html_url":"https://github.com/k1LoW/serverless-s3-sync/pull/30","diff_url":"https://github.com/k1LoW/serverless-s3-sync/pull/30.diff","patch_url":"https://github.com/k1LoW/serverless-s3-sync/pull/30.patch"},"body":"There is a security vulnerability in this package's dependencies\r\n\r\n```bash\r\n$ npm audit\r\n\r\n                       === npm audit security report ===\r\n\r\n┌──────────────────────────────────────────────────────────────────────────────┐\r\n│                                Manual Review                                 │\r\n│            Some vulnerabilities require your attention to resolve            │\r\n│                                                                              │\r\n│         Visit https://go.npm.me/audit-guide for additional guidance          │\r\n└──────────────────────────────────────────────────────────────────────────────┘\r\n┌───────────────┬──────────────────────────────────────────────────────────────┐\r\n│ Moderate      │ Regular Expression Denial of Service                         │\r\n├───────────────┼──────────────────────────────────────────────────────────────┤\r\n│ Package       │ mime                                                         │\r\n├───────────────┼──────────────────────────────────────────────────────────────┤\r\n│ Patched in    │ >= 1.4.1 < 2.0.0 || >= 2.0.3                                 │\r\n├───────────────┼──────────────────────────────────────────────────────────────┤\r\n│ Dependency of │ serverless-s3-sync [dev]                                     │\r\n├───────────────┼──────────────────────────────────────────────────────────────┤\r\n│ Path          │ serverless-s3-sync > @monolambda/s3 > mime                   │\r\n├───────────────┼──────────────────────────────────────────────────────────────┤\r\n│ More info     │ https://npmjs.com/advisories/535                             │\r\n└───────────────┴──────────────────────────────────────────────────────────────┘\r\nfound 1 moderate severity vulnerability in 45 scanned packages\r\n  1 vulnerability requires manual review. See the full report for details.\r\n```\r\n\r\nThis is fixed by switching to `@auth0/s3`. Also, I updated the other dependencies."},"comment":{"url":"https://api.github.com/repos/k1LoW/serverless-s3-sync/issues/comments/485463840","html_url":"https://github.com/k1LoW/serverless-s3-sync/pull/30#issuecomment-485463840","issue_url":"https://api.github.com/repos/k1LoW/serverless-s3-sync/issues/30","id":485463840,"node_id":"MDEyOklzc3VlQ29tbWVudDQ4NTQ2Mzg0MA==","user":{"login":"tobilg","id":1841985,"node_id":"MDQ6VXNlcjE4NDE5ODU=","avatar_url":"https://avatars3.githubusercontent.com/u/1841985?v=4","gravatar_id":"","url":"https://api.github.com/users/tobilg","html_url":"https://github.com/tobilg","followers_url":"https://api.github.com/users/tobilg/followers","following_url":"https://api.github.com/users/tobilg/following{/other_user}","gists_url":"https://api.github.com/users/tobilg/gists{/gist_id}","starred_url":"https://api.github.com/users/tobilg/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tobilg/subscriptions","organizations_url":"https://api.github.com/users/tobilg/orgs","repos_url":"https://api.github.com/users/tobilg/repos","events_url":"https://api.github.com/users/tobilg/events{/privacy}","received_events_url":"https://api.github.com/users/tobilg/received_events","type":"User","site_admin":false},"created_at":"2019-04-22T16:17:26Z","updated_at":"2019-04-22T16:17:26Z","author_association":"CONTRIBUTOR","body":"You’re welcome. Will you publish a new release @k1LoW? Thanks"}}
{"actor":{"display_login":"tobilg"}}