From 045747826428c91f2807a3dbc30271866007201b Mon Sep 17 00:00:00 2001 From: snyk-test Date: Wed, 3 Jul 2019 21:10:09 +0000 Subject: [PATCH] fix: .snyk & package.json to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-450202 --- .snyk | 10 +++++ package.json | 102 +++++++++++++++++++++++++-------------------------- 2 files changed, 61 insertions(+), 51 deletions(-) create mode 100644 .snyk diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..0dcacc5 --- /dev/null +++ b/.snyk @@ -0,0 +1,10 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.13.5 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-450202: + - gulp-jshint > lodash: + patched: '2019-07-03T21:10:07.763Z' + - mocha > yargs-unparser > lodash: + patched: '2019-07-03T21:10:07.763Z' diff --git a/package.json b/package.json index ab71ac0..4f98c09 100644 --- a/package.json +++ b/package.json @@ -1,53 +1,53 @@ { - "name": "Objectified", - "version": "0.7.5", - "author": "Delmarc Eric Rosario ", - "description": "A Real Pure JavaScript Template 'Engine'", - "contributors": [ - { - "name": "Delmarc Eric Rosario", - "email": "delmarc@uneek1.com" - } - ], - "bin": { - }, - "scripts": { - }, - "main": "", - "repository": { - "type": "git", - "url": "https://github.com/delmarc/Objectified.git" - }, - "bugs": { - "url": "https://github.com/delmarc/Objectified/issues" - }, - "keywords": [ - "Objectified" - ], - "dependencies" : { - "gulp":"", - "gulp-browserify":"", - "gulp-concat":"", - "gulp-jshint":"", - "gulp-livereload":"", - "gulp-mocha":"", - "gulp-notify":"", - "gulp-open":"", - "gulp-rename":"", - "gulp-uglify":"", - - "browserify":"", - "connect":"2.15.0", - "mocha":"", - "vinyl-source-stream":"" - }, - "analyze": false, - "devDependencies": { - }, - "bundledDependencies": [ - ], - "license": "MIT", - "engines": { - "node": ">=0.10.24" - } + "name": "Objectified", + "version": "0.7.5", + "author": "Delmarc Eric Rosario ", + "description": "A Real Pure JavaScript Template 'Engine'", + "contributors": [ + { + "name": "Delmarc Eric Rosario", + "email": "delmarc@uneek1.com" + } + ], + "bin": {}, + "scripts": { + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" + }, + "main": "", + "repository": { + "type": "git", + "url": "https://github.com/delmarc/Objectified.git" + }, + "bugs": { + "url": "https://github.com/delmarc/Objectified/issues" + }, + "keywords": [ + "Objectified" + ], + "dependencies": { + "gulp": "", + "gulp-browserify": "", + "gulp-concat": "", + "gulp-jshint": "", + "gulp-livereload": "", + "gulp-mocha": "", + "gulp-notify": "", + "gulp-open": "", + "gulp-rename": "", + "gulp-uglify": "", + "browserify": "", + "connect": "2.15.0", + "mocha": "", + "vinyl-source-stream": "", + "snyk": "^1.189.0" + }, + "analyze": false, + "devDependencies": {}, + "bundledDependencies": [], + "license": "MIT", + "engines": { + "node": ">=0.10.24" + }, + "snyk": true } \ No newline at end of file