Some medium+ vulnerable packages

[trycontrolmymind]

I've tried snyk to test my repo's and fond some
What you think about them?

Tested 110 dependencies for known vulnerabilities, found 6 vulnerabilities, 23 vulnerable paths.
? ✗ 14 Low vulnerabilities introduced in hoek
    Info: https://snyk.io/package/npm/hoek/2.16.3

? ✗ Medium severity vuln found in stringstream@0.0.5, introduced via node-pre-gyp@0.6.39
    Description: Uninitialized Memory Exposure
    Info: https://snyk.io/vuln/npm:stringstream:20180511
    From: node-pre-gyp@0.6.39 > request@2.81.0 > stringstream@0.0.5

? ✗ Medium severity vuln found in cryptiles@2.0.5, introduced via cryptiles@2.0.5
    Description: Insecure Randomness
    Info: https://snyk.io/vuln/npm:cryptiles:20180710

? ✗ Medium severity vuln found in cryptiles@2.0.5, introduced via hawk@3.1.3
    Description: Insecure Randomness
    Info: https://snyk.io/vuln/npm:cryptiles:20180710
    From: hawk@3.1.3 > cryptiles@2.0.5

? ✗ Medium severity vuln found in cryptiles@2.0.5, introduced via node-pre-gyp@0.6.39
    Description: Insecure Randomness
    Info: https://snyk.io/vuln/npm:cryptiles:20180710
    From: node-pre-gyp@0.6.39 > hawk@3.1.3 > cryptiles@2.0.5

? ✗ Medium severity vuln found in cryptiles@2.0.5, introduced via node-pre-gyp@0.6.39
    Description: Insecure Randomness
    Info: https://snyk.io/vuln/npm:cryptiles:20180710
    From: node-pre-gyp@0.6.39 > request@2.81.0 > hawk@3.1.3 > cryptiles@2.0.5

Seem's that we can try to fix with upgrading?

[xogeny]

This repository doesn't directly depend on any of these. It seems to me these upgrades are the responsibility of upstream packages.