{
  "name": "hippie",
  "version": "0.5.0",
  "description": "Simple end-to-end API testing",
  "main": "./lib/hippie.js",
  "homepage": "https://github.com/vesln/hippie",
  "scripts": {
    "test": "hydro",
    "pretest": "jshint .",
    "coverage": "istanbul cover _hydro"
  },
  "repository": {
    "type": "git",
    "url": "https://github.com/vesln/hippie"
  },
  "devDependencies": {
    "chai": "~1.8.1",
    "jshint": "~2.3.0",
    "istanbul": "~0.1.44",
    "express": "~3.4.4",
    "hydro": "~0.8.7",
    "hydro-bdd": "~0.1.0",
    "hydro-dot": "~1.0.5",
    "hydro-clean-stacks": "~0.1.0",
    "hydro-chai": "~0.1.3"
  },
  "author": "Veselin Todorov <hi@vesln.com>",
  "license": "MIT",
  "dependencies": {
    "assertion-error": "~1.0.0",
    "deep-eql": "~0.1.3",
    "es6-promise": "^3.0.2",
    "pathval": "0.0.1",
    "qs": "~0.6.5",
    "request": "~2.55.0"
  }
}

{
  "name": "hippie",
  "version": "0.5.0",
  "description": "Simple end-to-end API testing",
  "main": "./lib/hippie.js",
  "homepage": "https://github.com/vesln/hippie",
  "scripts": {
    "test": "hydro",
    "pretest": "jshint .",
    "coverage": "istanbul cover _hydro"
  },
  "repository": {
    "type": "git",
    "url": "https://github.com/vesln/hippie"
  },
  "devDependencies": {
    "chai": "~1.8.1",
    "jshint": "~2.3.0",
    "istanbul": "~0.1.44",
    "express": "~3.4.4",
    "hydro": "~0.8.7",
    "hydro-bdd": "~0.1.0",
    "hydro-dot": "~1.0.5",
    "hydro-clean-stacks": "~0.1.0",
    "hydro-chai": "~0.1.3"
  },
  "author": "Veselin Todorov <hi@vesln.com>",
  "license": "MIT",
  "dependencies": {
    "assertion-error": "~1.0.0",
    "deep-eql": "~0.1.3",
    "es6-promise": "^3.0.2",
    "pathval": "0.0.1",
    "qs": "~0.6.5",
    "request": "~2.74.0"
  }
}

Fix for 2 vulnerable dependency paths
Fix for 2 vulnerable dependency paths

hippie currently has a 4 vulnerable dependency paths, introducing 4 different types of known vulnerabilities.

This PR fixes vulnerable dependencies, [remote memory exposure ](https://snyk.io/vuln/npm:request:20160119) vulnerability in the `request` dependency, [ReDos vulnerability](https://snyk.io/vuln/npm:hawk:20160119) in the `hawk` dependency.

You can see [Snyk test report](https://snyk.io/test/github/vesln/hippie) of this project for details. 

This PR changes `Package.json` to upgrade `request` to the newer 2.74.0 version, and will fix the vulnerability listed above.
You can get alerts and fix PRs for future vulnerabilities for free by [watching this repo with Snyk](https://snyk.io/add).

Note this PR fixes all the vulnerabilities introduced trough `request` dependency, in order to be vulnerability free you will need to upgrade `qs` dependency as well.

Stay Secure,
The Snyk Team