From f188c5702af9a53852cbf57409b5acc2c899516f Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 19 Jun 2018 00:07:23 +0000 Subject: [PATCH] fix: .snyk & package.json to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:hoek:20180212 --- .snyk | 7 ++++++- package.json | 5 +++-- 2 files changed, 9 insertions(+), 3 deletions(-) diff --git a/.snyk b/.snyk index 165571e..24cb19a 100644 --- a/.snyk +++ b/.snyk @@ -1,5 +1,5 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.7.1 +version: v1.12.0 ignore: {} # patches apply the minimum changes required to fix a vulnerability patch: @@ -10,3 +10,8 @@ patch: patched: '2017-05-27T02:07:17.247Z' - gulp-sourcemaps > debug-fabulous > debug > ms: patched: '2017-07-15T07:51:15.528Z' + 'npm:hoek:20180212': + - express-jwt > jsonwebtoken > joi > hoek: + patched: '2018-06-19T00:07:21.698Z' + - express-jwt > jsonwebtoken > joi > topo > hoek: + patched: '2018-06-19T00:07:21.698Z' diff --git a/package.json b/package.json index f396344..59a76dd 100644 --- a/package.json +++ b/package.json @@ -26,7 +26,8 @@ "postinstall": "gulp", "production": "node dist/index.js", "snyk-protect": "snyk protect", - "prepublish": "npm run snyk-protect" + "prepublish": "npm run snyk-protect", + "prepare": "npm run snyk-protect" }, "repository": { "type": "git", @@ -97,7 +98,7 @@ "pmx": "^1.2.0", "run-sequence": "^2.2.0", "sequelize": "^4.2.0", - "snyk": "^1.41.1", + "snyk": "^1.83.0", "socket.io": "^2.0.3", "socket.io-redis": "^5.2.0", "squel": "^5.12.0",