Merge pull request #795 from snyk/fix/https-agent-vuln

fix: add packed dependency to prevent download from git

package.json

@@ -10,7 +10,8 @@
     "SECURITY.md",
     "README.md",
     "Contributor-Agreement.md",
-    ".snyk"
+    ".snyk",
+    "proxy-agent-3.1.0.tgz"
   ],
   "directories": {
     "test": "test"
@@ -70,7 +71,7 @@
     "needle": "^2.2.4",
     "opn": "^5.5.0",
     "os-name": "^3.0.0",
-    "proxy-agent": "git://github.com/snyk/node-proxy-agent.git#fix/https-agent-vuln",
+    "proxy-agent": "file:proxy-agent-3.1.0.tgz",
     "proxy-from-env": "^1.0.0",
     "semver": "^6.0.0",
     "snyk-config": "^2.2.1",
@@ -121,6 +122,9 @@
     "tslint": "^5.14.0",
     "typescript": "^3.4.1"
   },
+  "bundledDependencies": [
+    "proxy-agent"
+  ],
   "repository": {
     "type": "git",
     "url": "https://github.com/snyk/snyk.git"