address security warnings

[stefan-guggisberg]

No description provided.

[stefan-guggisberg]

there's security warnings regarding hoek. hoek enters the dependency tree via nodegit via node-pre-gyp.

see mapbox/node-pre-gyp#346

[stefan-guggisberg]

there are security warnings regarding growl and cryptiles, both indirectly entering the dependency tree via nodegit.

see e.g. nickmerwin/node-coveralls#188

[stefan-guggisberg]

the vulnerabilities enter via nodegit.

i've created a PR: nodegit/nodegit#1547

[stefan-guggisberg]

for now using nodegit fork which includes fixes for vulnerabilities.

once PR nodegit/nodegit#1547 has been accepted or the vulnerabilities have been fixed otherwise we'll return to using official npm published version of nodegit.

closing issue.