{
  "repository": "https://github.com/faye/websocket-driver-node",
  "commit_source": "git_rev_parse",
  "commit_sha": "5d6a9aaf5f019007d917bd9ddc7eeb775c86cc1f",
  "submitted_target": {
    "target_kind": "npm_package",
    "version": "0.7.4",
    "ref": "0.7.4",
    "commit_sha": "5f711f089234a46f8d1e50054115ea169257eaa4",
    "display": "websocket-driver@0.7.4 (commit 5f711f0)"
  },
  "variant_target": {
    "target_kind": "npm_package",
    "version": "0.7.5",
    "ref": "0.7.5",
    "commit_sha": "5d6a9aaf5f019007d917bd9ddc7eeb775c86cc1f",
    "display": "websocket-driver@0.7.5 (commit 5d6a9aa)"
  },
  "notes": "Both versions tested via published npm packages cached in the project cache. The 0.7.5 tag resolves to commit 5d6a9aaf5f019007d917bd9ddc7eeb775c86cc1f, which is HEAD of the repo mirror. The fix commit is 5b197ca874dab58e96cacad8a3c256797d804680 (one line added to draft75.js). The bypass was confirmed on the 0.7.5 build (the fixed version)."
}