From 05c527dbdbd48c63a9eae55b7084e1381dde7ec7 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 26 Jun 2018 00:54:01 +0000 Subject: [PATCH] fix: .snyk & package.json to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:tunnel-agent:20170305 --- .snyk | 5 ++++- package.json | 5 +++-- 2 files changed, 7 insertions(+), 3 deletions(-) diff --git a/.snyk b/.snyk index de3b8b7..807b668 100644 --- a/.snyk +++ b/.snyk @@ -1,5 +1,5 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.7.1 +version: v1.12.0 ignore: {} # patches apply the minimum changes required to fix a vulnerability patch: @@ -9,3 +9,6 @@ patch: 'npm:ms:20170412': - express-status-monitor > socket.io > socket.io-adapter > socket.io-parser > debug > ms: patched: '2017-10-11T11:21:12.468Z' + 'npm:tunnel-agent:20170305': + - node-sass > request > tunnel-agent: + patched: '2018-06-26T00:53:59.477Z' diff --git a/package.json b/package.json index 2851873..b79f872 100644 --- a/package.json +++ b/package.json @@ -15,7 +15,8 @@ "watch": "npm-run-all --parallel watch:*", "watch:css": "nodemon -e scss -w public/css -x npm run build:css", "snyk-protect": "snyk protect", - "prepublish": "npm run snyk-protect" + "prepublish": "npm run snyk-protect", + "prepare": "npm run snyk-protect" }, "dependencies": { "async": "^2.6.0", @@ -47,7 +48,7 @@ "passport-github": "^1.1.0", "passport-local": "^1.0.0", "passport-twitter": "^1.0.4", - "snyk": "^1.49.1" + "snyk": "^1.85.0" }, "devDependencies": {}, "engines": {