From 163da696c23d02b21032326b9fa166685cf22e79 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 6 May 2020 18:37:52 -0400 Subject: [PATCH 1/2] fix: .snyk & package.json to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- .snyk | 8 ++++++++ 1 file changed, 8 insertions(+) create mode 100644 .snyk diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..f8a9206 --- /dev/null +++ b/.snyk @@ -0,0 +1,8 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.14.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - m2m-status > request-promise > request-promise-core > lodash: + patched: '2020-05-06T22:37:50.511Z' From 728676d3f517efafd2fd036dbdce4aaf3a31edad Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 6 May 2020 18:37:54 -0400 Subject: [PATCH 2/2] fix: .snyk & package.json to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- package.json | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) diff --git a/package.json b/package.json index 56b332c..cce5dd8 100644 --- a/package.json +++ b/package.json @@ -4,10 +4,11 @@ "description": "CLI to check status of your m2m-status sims", "main": "src", "scripts": { - "prepublish": "eslint src", + "prepublish": "yarn run snyk-protect && eslint src", "release:major": "changelog -M && git add CHANGELOG.md && git commit -m 'updated CHANGELOG.md' && npm version major && git push origin && git push origin --tags && npm publish", "release:minor": "changelog -m && git add CHANGELOG.md && git commit -m 'updated CHANGELOG.md' && npm version minor && git push origin && git push origin --tags && npm publish", - "release:patch": "changelog -p && git add CHANGELOG.md && git commit -m 'updated CHANGELOG.md' && npm version patch && git push origin && git push origin --tags && npm publish" + "release:patch": "changelog -p && git add CHANGELOG.md && git commit -m 'updated CHANGELOG.md' && npm version patch && git push origin && git push origin --tags && npm publish", + "snyk-protect": "snyk protect" }, "engines": { "node": ">=4" @@ -35,7 +36,8 @@ "chalk": "^2.0.0", "commander": "^2.9.0", "m2m-status": "1.0.2", - "update-notifier": "^2.1.0" + "update-notifier": "^2.1.0", + "snyk": "^1.319.1" }, "devDependencies": { "eslint": "5.16.0", @@ -68,5 +70,6 @@ 0 ] } - } + }, + "snyk": true }