[Snyk] Fix for 11 vulnerable dependencies

.snyk

@@ -0,0 +1,46 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.12.0
+ignore: {}
+# patches apply the minimum changes required to fix a vulnerability
+patch:
+  'npm:hoek:20180212':
+    - js-devbox > jest-cli > jest-runner > jest-runtime > jest-haste-map > sane > fsevents > node-pre-gyp > hawk > hoek:
+        patched: '2018-10-11T02:58:11.811Z'
+    - js-devbox > babel-cli > chokidar > fsevents > node-pre-gyp > hawk > hoek:
+        patched: '2018-10-11T02:58:11.811Z'
+    - js-devbox > babel-cli > chokidar > fsevents > node-pre-gyp > hawk > sntp > hoek:
+        patched: '2018-10-11T02:58:11.811Z'
+    - js-devbox > babel-cli > chokidar > fsevents > node-pre-gyp > hawk > boom > hoek:
+        patched: '2018-10-11T02:58:11.811Z'
+    - js-devbox > babel-cli > chokidar > fsevents > node-pre-gyp > hawk > cryptiles > boom > hoek:
+        patched: '2018-10-11T02:58:11.811Z'
+    - js-devbox > jest-cli > jest-runner > jest-haste-map > sane > fsevents > node-pre-gyp > hawk > hoek:
+        patched: '2018-10-11T02:58:11.811Z'
+    - js-devbox > jest-cli > jest-haste-map > sane > fsevents > node-pre-gyp > hawk > sntp > hoek:
+        patched: '2018-10-11T02:58:11.811Z'
+    - js-devbox > jest-cli > jest-runtime > jest-haste-map > sane > fsevents > node-pre-gyp > hawk > hoek:
+        patched: '2018-10-11T02:58:11.811Z'
+    - js-devbox > jest-cli > jest-haste-map > sane > fsevents > node-pre-gyp > hawk > boom > hoek:
+        patched: '2018-10-11T02:58:11.811Z'
+    - js-devbox > jest-cli > jest-runner > jest-haste-map > sane > fsevents > node-pre-gyp > hawk > boom > hoek:
+        patched: '2018-10-11T02:58:11.811Z'
+    - js-devbox > jest-cli > jest-haste-map > sane > fsevents > node-pre-gyp > hawk > hoek:
+        patched: '2018-10-11T02:58:11.811Z'
+    - js-devbox > jest-cli > jest-runtime > jest-haste-map > sane > fsevents > node-pre-gyp > hawk > boom > hoek:
+        patched: '2018-10-11T02:58:11.811Z'
+    - js-devbox > jest-cli > jest-haste-map > sane > fsevents > node-pre-gyp > hawk > cryptiles > boom > hoek:
+        patched: '2018-10-11T02:58:11.811Z'
+    - js-devbox > jest-cli > jest-runtime > jest-haste-map > sane > fsevents > node-pre-gyp > hawk > sntp > hoek:
+        patched: '2018-10-11T02:58:11.811Z'
+    - js-devbox > jest-cli > jest-runner > jest-haste-map > sane > fsevents > node-pre-gyp > hawk > sntp > hoek:
+        patched: '2018-10-11T02:58:11.811Z'
+    - js-devbox > jest-cli > jest-runner > jest-runtime > jest-haste-map > sane > fsevents > node-pre-gyp > hawk > boom > hoek:
+        patched: '2018-10-11T02:58:11.811Z'
+    - js-devbox > jest-cli > jest-runner > jest-haste-map > sane > fsevents > node-pre-gyp > hawk > cryptiles > boom > hoek:
+        patched: '2018-10-11T02:58:11.811Z'
+    - js-devbox > jest-cli > jest-runtime > jest-haste-map > sane > fsevents > node-pre-gyp > hawk > cryptiles > boom > hoek:
+        patched: '2018-10-11T02:58:11.811Z'
+    - js-devbox > jest-cli > jest-runner > jest-runtime > jest-haste-map > sane > fsevents > node-pre-gyp > hawk > sntp > hoek:
+        patched: '2018-10-11T02:58:11.811Z'
+    - js-devbox > jest-cli > jest-runner > jest-runtime > jest-haste-map > sane > fsevents > node-pre-gyp > hawk > cryptiles > boom > hoek:
+        patched: '2018-10-11T02:58:11.811Z'

package.json

@@ -14,31 +14,42 @@
     "lint": "eslint src",
     "precommit": "lint-staged && yarn test",
     "prepack": "yarn build",
-    "prepare": "yarn build",
+    "prepare": "npm run snyk-protect; yarn build",
     "prepublishOnly": "yarn test",
     "preversion": "yarn test",
     "test": "yarn lint && yarn run flow && yarn build && yarn test-only",
     "test-only": "jest",
     "contrib": "./scripts/contrib.sh",
-    "tidy-ci": "yarn contrib"
+    "tidy-ci": "yarn contrib",
+    "snyk-protect": "snyk protect"
   },
   "engines": {
     "node": ">=6.0.0",
     "yarn": "^1.3.2"
   },
-  "keywords": ["KEYWORDS"],
+  "keywords": [
+    "KEYWORDS"
+  ],
   "lint-staged": {
-    "src/**/*.{js,jsx}": ["prettier --parser flow --write", "git add"],
-    "**/*.{json,md}": ["prettier --write", "git add"]
+    "src/**/*.{js,jsx}": [
+      "prettier --parser flow --write",
+      "git add"
+    ],
+    "**/*.{json,md}": [
+      "prettier --write",
+      "git add"
+    ]
   },
   "homepage": "https://github.com/holvonix-open/js-kitchen-sync#readme",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/holvonix-open/js-kitchen-sync.git"
   },
-  "author":
-    "Holvonix LLC and the js-kitchen-sync AUTHORS <sourcecode@holvonix.com> (https://github.com/holvonix-open/js-kitchen-sync)",
-  "contributors": ["See AUTHORS file", "See CONTRIBUTORS file"],
+  "author": "Holvonix LLC and the js-kitchen-sync AUTHORS <sourcecode@holvonix.com> (https://github.com/holvonix-open/js-kitchen-sync)",
+  "contributors": [
+    "See AUTHORS file",
+    "See CONTRIBUTORS file"
+  ],
   "files": [
     "lib/",
     "CHANGELOG.md",
@@ -59,7 +70,8 @@
   "license": "Apache-2.0",
   "dependencies": {
     "js-devbox": "5.0.0",
-    "json2array": "3.0.0"
+    "json2array": "3.0.0",
+    "snyk": "^1.103.1"
   },
   "devDependencies": {
     "js-devbox": "5.0.0"
@@ -68,5 +80,6 @@
     "testEnvironment": "node",
     "collectCoverage": true,
     "coverageDirectory": "./coverage/"
-  }
+  },
+  "snyk": true
 }