From c68eac8c021479c86460b314ccb00e2d0f800657 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 19 Jun 2018 23:48:20 +0000 Subject: [PATCH] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:hoek:20180212 Latest report for davglass/registry-static: https://snyk.io/test/github/davglass/registry-static --- .snyk | 14 ++++++++++++++ package.json | 11 +++++++---- 2 files changed, 21 insertions(+), 4 deletions(-) create mode 100644 .snyk diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..d35d044 --- /dev/null +++ b/.snyk @@ -0,0 +1,14 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.12.0 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:hoek:20180212': + - follow-registry > follow > request > hawk > hoek: + patched: '2018-06-19T23:48:19.391Z' + - follow-registry > follow > request > hawk > boom > hoek: + patched: '2018-06-19T23:48:19.391Z' + - follow-registry > follow > request > hawk > sntp > hoek: + patched: '2018-06-19T23:48:19.391Z' + - follow-registry > follow > request > hawk > cryptiles > boom > hoek: + patched: '2018-06-19T23:48:19.391Z' diff --git a/package.json b/package.json index c983bea..9baebc0 100644 --- a/package.json +++ b/package.json @@ -26,7 +26,8 @@ "rimraf": "^2.6.2", "slice-file": "^0.2.1", "timethat": "~0.0.2", - "yargs": "^1.3.3" + "yargs": "^1.3.3", + "snyk": "^1.83.0" }, "devDependencies": { "abstract-blob-store": "^3.3.4", @@ -38,9 +39,10 @@ "supertest": "^1.2.0" }, "scripts": { - "prepublish": "mkdirp man && marked-man README.md > man/registry-static.1", + "prepublish": "npm run snyk-protect; mkdirp man && marked-man README.md > man/registry-static.1", "pretest": "jshint ./bin/* ./lib/* ./tests/*", - "test": "istanbul cover --print both -- _mocha tests" + "test": "istanbul cover --print both -- _mocha tests", + "snyk-protect": "snyk protect" }, "repository": { "type": "git", @@ -51,5 +53,6 @@ "bugs": { "url": "https://github.com/davglass/registry-static/issues" }, - "homepage": "https://github.com/davglass/registry-static" + "homepage": "https://github.com/davglass/registry-static", + "snyk": true }