From 24b8357b00f5f1289c8fcb0b0e80e8872f370fd6 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 24 Jun 2020 21:18:47 +0000 Subject: [PATCH] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- .snyk | 14 ++++++++++++++ package.json | 8 +++++++- 2 files changed, 21 insertions(+), 1 deletion(-) create mode 100644 .snyk diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..f108256 --- /dev/null +++ b/.snyk @@ -0,0 +1,14 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.16.0 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - grunt > grunt-legacy-log > lodash: + patched: '2020-06-24T21:18:45.019Z' + - grunt > grunt-legacy-util > lodash: + patched: '2020-06-24T21:18:45.019Z' + - grunt-contrib-jshint > jshint > lodash: + patched: '2020-06-24T21:18:45.019Z' + - grunt > grunt-legacy-log > grunt-legacy-log-utils > lodash: + patched: '2020-06-24T21:18:45.019Z' diff --git a/package.json b/package.json index 5b93497..2602422 100644 --- a/package.json +++ b/package.json @@ -3,7 +3,9 @@ "version": "0.0.2", "description": "Javascript Library for http://phish.in/", "scripts": { - "test": "echo \"Error: no test specified\" && exit 1" + "test": "echo \"Error: no test specified\" && exit 1", + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" }, "author": { "name": "Lucas Holmquist", @@ -17,5 +19,9 @@ "grunt-contrib-jshint": "^1.1.0", "grunt-contrib-qunit": "^1.2.0", "grunt-contrib-uglify": "^3.1.0" + }, + "snyk": true, + "dependencies": { + "snyk": "^1.348.2" } }