61
66%

Ran 18 Oct 2016 02:57PM UTC

Jobs 2

Files 1

Run time 3s

Badge

Embed ▾

pending completion

Build # 61

Build Type

Pull #9

travis-ci

Committed by

web-flow

Commit Message

Fix for 4 vulnerable dependency paths

hubot-typetalk currently has a 8 vulnerable dependency paths, introducing 7 different types of known vulnerabilities.

This PR fixes vulnerable dependencies.
* [ReDOS vulnerability](https://snyk.io/vuln/npm:hawk:20160119) in the `hawk` dependency.
* [remote memory exposure ](https://snyk.io/vuln/npm:request:20160119) vulnerability in the `request` dependency.
* [Denial of Service (Event Loop Blocking)](https://snyk.io/vuln/npm:qs:20140806-1) vulnerability in the `qs` dependency.
* [Denial of Service (Memory Exhaustion)](https://snyk.io/vuln/npm:qs:20140806) vulnerability in the `qs` dependency.

You can see [Snyk test report](https://snyk.io/test/github/nulab/hubot-typetalk) of this project for details. 

This PR changes `Package.json` to upgrade `request` to the newer 2.74.0 version, and will fix the vulnerabilities listed above.

You can get alerts and fix PRs for future vulnerabilities for free by [watching this repo with Snyk](https://snyk.io/add).

Note this PR fixes all the vulnerabilities introduced trough `request` dependency, in order to be vulnerability free you will need to upgrade others dependencies as well.

Stay Secure,
The Snyk Team

Pull Request Pull Request #9: Fix for 4 vulnerable dependency paths

Run Details

122 of 186 relevant lines covered (65.59%)

5.39 hits per line

Uncovered Existing Lines

Lines	Coverage	∆	File
1	65.59	1.08%	src/typetalk.coffee

Jobs

ID	Job ID	Ran	Files	Coverage
1	61.1	18 Oct 2016 02:57PM UTC	1	58.6	Travis Job 61.1
2	61.2	18 Oct 2016 02:57PM UTC	1	63.44	Travis Job 61.2

Source Files on build 61

Coverage	∆	File	Lines	Relevant	Covered	Missed	Hits/Line

nulab / hubot-typetalk / 61
66%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Uncovered Existing Lines

Jobs

Source Files on build 61

nulab / hubot-typetalk / 61 66%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Uncovered Existing Lines

Jobs

Source Files on build 61

nulab / hubot-typetalk / 61
66%

README BADGES
x