{
  "name": "marvel-api",
  "version": "1.0.0",
  "description": "Node.js wrapper for working with the official Marvel Comics API",
  "main": "index.js",
  "scripts": {
    "test": "make test"
  },
  "repository": {
    "type": "git",
    "url": "git://github.com/fiveisprime/marvel-api.git"
  },
  "keywords": [
    "marvel",
    "api"
  ],
  "author": "Matt Hernandez <matt@modulus.io>",
  "license": "ISC",
  "bugs": {
    "url": "https://github.com/fiveisprime/marvel-api/issues"
  },
  "homepage": "http://fiveisprime.github.io/marvel-api/",
  "dependencies": {
    "request": "~2.33.0",
    "q": "~1.0.0"
  },
  "devDependencies": {
    "jshint": "~2.4.3",
    "should": "~3.1.2",
    "nock": "~0.27.2",
    "mocha": "~1.17.1",
    "istanbul": "~0.2.4"
  }
}

{
  "name": "marvel-api",
  "version": "1.0.0",
  "description": "Node.js wrapper for working with the official Marvel Comics API",
  "main": "index.js",
  "scripts": {
    "test": "make test"
  },
  "repository": {
    "type": "git",
    "url": "git://github.com/fiveisprime/marvel-api.git"
  },
  "keywords": [
    "marvel",
    "api"
  ],
  "author": "Matt Hernandez <matt@modulus.io>",
  "license": "ISC",
  "bugs": {
    "url": "https://github.com/fiveisprime/marvel-api/issues"
  },
  "homepage": "http://fiveisprime.github.io/marvel-api/",
  "dependencies": {
    "request": "~2.74.0",
    "q": "~1.0.0"
  },
  "devDependencies": {
    "jshint": "~2.4.3",
    "should": "~3.1.2",
    "nock": "~0.27.2",
    "mocha": "~1.17.1",
    "istanbul": "~0.2.4"
  }
}

Fix for 4 vulnerable dependency paths
Fix for 4 vulnerable dependency paths

marvel-api currently has a 4 vulnerable dependency paths, introducing 4 different types of known vulnerabilities.

This PR fixes vulnerable dependencies.
* [ReDOS vulnerability](https://snyk.io/vuln/npm:hawk:20160119) in the `hawk` dependency.
* [remote memory exposure ](https://snyk.io/vuln/npm:request:20160119) vulnerability in the `request` dependency.
* [Denial of Service (Event Loop Blocking) vulnerability](https://snyk.io/vuln/npm:qs:20140806-1) in the `qs` dependency.
* [Denial of Service (Memory Exhaustion)](https://snyk.io/vuln/npm:qs:20140806) in the `qs` dependency.

You can see [Snyk test report](https://snyk.io/test/github/fiveisprime/marvel-api) of this project for details. 

This PR changes `Package.json` to upgrade `request` to the newer 2.74.0 version, and will fix the vulnerabilities.

You can get alerts and fix PRs for future vulnerabilities for free by [watching this repo with Snyk](https://snyk.io/add).

Stay Secure,
The Snyk Team