Improving security

[ralic]

Before

added 1236 packages from 531 contributors and audited 19248 packages in 174.81s
found 554 vulnerabilities (4 low, 6 moderate, 544 high)
  run `npm audit fix` to fix them, or `npm audit` for details

After

                      === npm audit security report ===


                                 Manual Review
             Some vulnerabilities require your attention to resolve

          Visit https://go.npm.me/audit-guide for additional guidance


  Moderate        Memory Exposure

  Package         tunnel-agent

  Patched in      >=0.6.0

  Dependency of   gulp-flowtype [dev]

  Path            gulp-flowtype > flow-bin > bin-wrapper > download > caw >
                  tunnel-agent

  More info       https://npmjs.com/advisories/598


  Low             Regular Expression Denial of Service

  Package         braces

  Patched in      >=2.3.1

  Dependency of   babel-cli [dev]

  Path            babel-cli > chokidar > anymatch > micromatch > braces

  More info       https://npmjs.com/advisories/786


  Low             Regular Expression Denial of Service

  Package         braces

  Patched in      >=2.3.1

  Dependency of   gulp-flowtype [dev]

  Path            gulp-flowtype > babel-cli > chokidar > anymatch > micromatch
                  > braces

  More info       https://npmjs.com/advisories/786


  Low             Regular Expression Denial of Service

  Package         braces

  Patched in      >=2.3.1

  Dependency of   gulp-flowtype [dev]

  Path            gulp-flowtype > flow-bin > bin-wrapper > download >
                  gulp-decompress > decompress > vinyl-fs > glob-stream >
                  micromatch > braces

  More info       https://npmjs.com/advisories/786


  Low             Regular Expression Denial of Service

  Package         braces

  Patched in      >=2.3.1

  Dependency of   gulp-flowtype [dev]

  Path            gulp-flowtype > flow-bin > bin-wrapper > download > vinyl-fs
                  > glob-stream > micromatch > braces

  More info       https://npmjs.com/advisories/786

found 5 vulnerabilities (4 low, 1 moderate) in 19416 scanned packages
  5 vulnerabilities require manual review. See the full report for details.

[facebook-github-bot]

Thank you for your pull request and welcome to our community. We require contributors to sign our Contributor License Agreement, and we don't seem to have you on file. In order for us to review and merge your code, please sign up at https://code.facebook.com/cla. If you are contributing on behalf of someone else (eg your employer), the individual CLA may not be sufficient and your employer may need the corporate CLA signed.

If you have received this in error or have any questions, please contact us at [email protected]. Thanks!