From 5681c46a89dc5b8db5a18cf9d80649eb849c3afa Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 1 May 2020 04:52:21 -0400 Subject: [PATCH 1/2] fix: packages/babel-plugin-transform-react-jsx/package.json & packages/babel-plugin-transform-react-jsx/.snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- packages/babel-plugin-transform-react-jsx/package.json | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/packages/babel-plugin-transform-react-jsx/package.json b/packages/babel-plugin-transform-react-jsx/package.json index 5af70957b122..2d9fe3186614 100644 --- a/packages/babel-plugin-transform-react-jsx/package.json +++ b/packages/babel-plugin-transform-react-jsx/package.json @@ -14,7 +14,8 @@ "dependencies": { "@babel/helper-builder-react-jsx": "^7.3.0", "@babel/helper-plugin-utils": "^7.0.0", - "@babel/plugin-syntax-jsx": "^7.2.0" + "@babel/plugin-syntax-jsx": "^7.2.0", + "snyk": "^1.316.1" }, "peerDependencies": { "@babel/core": "^7.0.0-0" @@ -22,5 +23,10 @@ "devDependencies": { "@babel/core": "^7.2.0", "@babel/helper-plugin-test-runner": "^7.0.0" - } + }, + "scripts": { + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" + }, + "snyk": true } From afda8055917aef720aeaf51c34f0a2103d11ea60 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 1 May 2020 04:52:22 -0400 Subject: [PATCH 2/2] fix: packages/babel-plugin-transform-react-jsx/package.json & packages/babel-plugin-transform-react-jsx/.snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- packages/babel-plugin-transform-react-jsx/.snyk | 10 ++++++++++ 1 file changed, 10 insertions(+) create mode 100644 packages/babel-plugin-transform-react-jsx/.snyk diff --git a/packages/babel-plugin-transform-react-jsx/.snyk b/packages/babel-plugin-transform-react-jsx/.snyk new file mode 100644 index 000000000000..3ab2ec623f07 --- /dev/null +++ b/packages/babel-plugin-transform-react-jsx/.snyk @@ -0,0 +1,10 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.14.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - '@babel/helper-builder-react-jsx > @babel/types > lodash': + patched: '2020-05-01T08:52:19.264Z' + - '@babel/helper-builder-react-jsx > @babel/helper-annotate-as-pure > @babel/types > lodash': + patched: '2020-05-01T08:52:19.264Z'