From 607ab82e19206ee292447a61a9dfa032479fc8b3 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 1 May 2020 00:03:08 +0200 Subject: [PATCH 1/2] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- package.json | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) diff --git a/package.json b/package.json index ee47525..56d3fe0 100644 --- a/package.json +++ b/package.json @@ -31,13 +31,14 @@ "test:clean": "rimraf ./coverage", "test:watch": "npm run test -- --watch", "lint": "eslint src", - "prepublish": "npm run build", + "prepublish": "npm run snyk-protect && npm run build", "lint-staged": "lint-staged", "jsdoc-documentation": "jsdoc-documentation", "jsdoc": "jsdoc-documentation --file", "prestyleguide": "npm run jsdoc", "styleguide": "styleguidist server", - "styleguide:build": "styleguidist build" + "styleguide:build": "styleguidist build", + "snyk-protect": "snyk protect" }, "repository": { "type": "git", @@ -189,7 +190,8 @@ "webpack": "^4.29.6" }, "dependencies": { - "npm-check-updates": "^3.1.1" + "npm-check-updates": "^3.1.1", + "snyk": "^1.316.1" }, "peerDependencies": {}, "publishConfig": { @@ -323,5 +325,6 @@ ] }, "declinationId": "js", - "contributors": [] + "contributors": [], + "snyk": true } From 0ea7713c0e2bd5c1ad24b8f8fd23a084ad379995 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 1 May 2020 00:03:09 +0200 Subject: [PATCH 2/2] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- .snyk | 10 ++++++++++ 1 file changed, 10 insertions(+) create mode 100644 .snyk diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..f65fe2a --- /dev/null +++ b/.snyk @@ -0,0 +1,10 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.14.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - npm-check-updates > lodash: + patched: '2020-04-30T22:03:05.824Z' + - npm-check-updates > node-alias > lodash: + patched: '2020-04-30T22:03:05.824Z'