From d8021f77c16ac10b9611bb105be5a795e1ab49df Mon Sep 17 00:00:00 2001 From: snyk-test Date: Wed, 3 Jul 2019 21:56:30 +0000 Subject: [PATCH] fix: .snyk & package.json to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-450202 --- .snyk | 10 ++++++++++ package.json | 10 +++++++--- 2 files changed, 17 insertions(+), 3 deletions(-) create mode 100644 .snyk diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..2df9e47 --- /dev/null +++ b/.snyk @@ -0,0 +1,10 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.13.5 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-450202: + - lodash: + patched: '2019-07-03T21:56:26.784Z' + - beam-uri > lodash: + patched: '2019-07-03T21:56:26.784Z' diff --git a/package.json b/package.json index ad8814d..9c60475 100644 --- a/package.json +++ b/package.json @@ -7,7 +7,9 @@ "test": "mocha test/index.js", "performance": "node --allow-natives-syntax ./node_modules/mocha/bin/_mocha --reporter mocha-performance ./test/index.js", "cover": "NODE_ENV=test istanbul cover _mocha -- -R spec test/index.js", - "lint": "eslint ." + "lint": "eslint .", + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" }, "repository": { "type": "git", @@ -20,11 +22,13 @@ "joi": "^14.3.1", "lodash": "^4.5.1", "moment": "^2.15.0", - "uuid": "^3.3.2" + "uuid": "^3.3.2", + "snyk": "^1.189.0" }, "devDependencies": { "debug": "^4.1.1", "eslint": "^5.15.3", "mocha": "^6.0.2" - } + }, + "snyk": true }