From db65d7bbce02bc2443b2b23ca8ba268b35d41baf Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 25 May 2019 07:22:48 +0000 Subject: [PATCH] fix: .snyk & package.json to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-AXIOS-174505 --- .snyk | 8 ++++++++ package.json | 10 +++++++--- 2 files changed, 15 insertions(+), 3 deletions(-) create mode 100644 .snyk diff --git a/.snyk b/.snyk new file mode 100644 index 00000000..62a83acf --- /dev/null +++ b/.snyk @@ -0,0 +1,8 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.13.5 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-AXIOS-174505: + - dav-js > axios: + patched: '2019-05-25T07:22:46.623Z' diff --git a/package.json b/package.json index 8261f7e8..a9eba8c9 100644 --- a/package.json +++ b/package.json @@ -19,14 +19,17 @@ "spellcheck": "npx gulp spellcheck", "start": "ts-node ./src/index.ts", "tsc": "gulp tsc", - "tslint": "gulp tslint" + "tslint": "gulp tslint", + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" }, "dependencies": { "cassandra-driver": "^3.5.0", "dav-js": "DAVFoundation/dav-js", "express": "^4.16.4", "kafka-node": "^2.6.1", - "rxjs": "^5.5.12" + "rxjs": "^5.5.12", + "snyk": "^1.167.2" }, "devDependencies": { "@types/cassandra-driver": "^3.4.0", @@ -48,5 +51,6 @@ "ts-node": "^8.0.3", "tslint": "^5.15.0", "typescript": "^3.4.2" - } + }, + "snyk": true }