Port 22

GitHub fixes authorisation vulnerability in the NPM JavaScript package registry