diff --git a/packages/babel-plugin-transform-react-jsx/.snyk b/packages/babel-plugin-transform-react-jsx/.snyk new file mode 100644 index 000000000000..3ab2ec623f07 --- /dev/null +++ b/packages/babel-plugin-transform-react-jsx/.snyk @@ -0,0 +1,10 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.14.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - '@babel/helper-builder-react-jsx > @babel/types > lodash': + patched: '2020-05-01T08:52:19.264Z' + - '@babel/helper-builder-react-jsx > @babel/helper-annotate-as-pure > @babel/types > lodash': + patched: '2020-05-01T08:52:19.264Z' diff --git a/packages/babel-plugin-transform-react-jsx/package.json b/packages/babel-plugin-transform-react-jsx/package.json index 5af70957b122..2d9fe3186614 100644 --- a/packages/babel-plugin-transform-react-jsx/package.json +++ b/packages/babel-plugin-transform-react-jsx/package.json @@ -14,7 +14,8 @@ "dependencies": { "@babel/helper-builder-react-jsx": "^7.3.0", "@babel/helper-plugin-utils": "^7.0.0", - "@babel/plugin-syntax-jsx": "^7.2.0" + "@babel/plugin-syntax-jsx": "^7.2.0", + "snyk": "^1.316.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" @@ -22,5 +23,10 @@ "devDependencies": { "@babel/core": "^7.2.0", "@babel/helper-plugin-test-runner": "^7.0.0" - } + }, + "scripts": { + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" + }, + "snyk": true }