{
  "name": "vinli",
  "version": "3.4.0",
  "description": "Official Node.js SDK for interacting with the Vinli Platform",
  "main": "index.js",
  "repository": {
    "type": "git",
    "url": "https://github.com/vinli/vinli-node"
  },
  "scripts": {
    "test": "mocha --recursive -R spec",
    "coverage": "istanbul cover node_modules/.bin/_mocha -- --recursive --reporter list",
    "lint": "eslint --quiet ."
  },
  "author": "Powell Kinney",
  "license": "MIT",
  "dependencies": {
    "extend": "~2.0.0",
    "hoek": "~2.12.0",
    "joi": "^6.0.8",
    "q": "~1.2.0",
    "request": "~2.54.0",
    "yarp": "^0.3.0"
  },
  "devDependencies": {
    "chai": "~2.2.0",
    "chai-as-promised": "~4.3.0",
    "eslint": "^0.21.2",
    "istanbul": "^0.3.11",
    "mocha": "~2.2.1",
    "nock": "~1.3.0"
  },
  "bugs": {
    "url": "https://github.com/vinli/vinli-node/issues"
  },
  "homepage": "https://github.com/vinli/vinli-node"
}

{
  "name": "vinli",
  "version": "3.4.0",
  "description": "Official Node.js SDK for interacting with the Vinli Platform",
  "main": "index.js",
  "repository": {
    "type": "git",
    "url": "https://github.com/vinli/vinli-node"
  },
  "scripts": {
    "test": "mocha --recursive -R spec",
    "coverage": "istanbul cover node_modules/.bin/_mocha -- --recursive --reporter list",
    "lint": "eslint --quiet ."
  },
  "author": "Powell Kinney",
  "license": "MIT",
  "dependencies": {
    "extend": "~2.0.0",
    "hoek": "~2.12.0",
    "joi": "^6.0.8",
    "q": "~1.2.0",
    "request": "~2.74.0",
    "yarp": "^0.3.0"
  },
  "devDependencies": {
    "chai": "~2.2.0",
    "chai-as-promised": "~4.3.0",
    "eslint": "^0.21.2",
    "istanbul": "^0.3.11",
    "mocha": "~2.2.1",
    "nock": "~1.3.0"
  },
  "bugs": {
    "url": "https://github.com/vinli/vinli-node/issues"
  },
  "homepage": "https://github.com/vinli/vinli-node"
}

Fix for 2 vulnerable dependency paths
Fix for 2 vulnerable dependency paths

vinli-node currently has a 2 vulnerable dependency paths, introducing 2 different types of known vulnerabilities.

This PR fixes vulnerable dependencies.
* [ReDOS vulnerability](https://snyk.io/vuln/npm:hawk:20160119) in the `hawk` dependency.
* [remote memory exposure ](https://snyk.io/vuln/npm:request:20160119) vulnerability in the `request` dependency

You can see [Snyk test report](https://snyk.io/test/github/vinli/vinli-node) of this project for details. 

This PR changes `Package.json` to upgrade `request` to the newer 2.74.0 version, and will fix all the vulnerabilities.

You can get alerts and fix PRs for future vulnerabilities for free by [watching this repo with Snyk](https://snyk.io/add).


Stay Secure,
The Snyk Team