From 8dc45b150f4dca6e940aff998fd2ffdf9b1504f9 Mon Sep 17 00:00:00 2001 From: snyk-test Date: Wed, 3 Jul 2019 22:18:32 +0000 Subject: [PATCH] fix: .snyk & package.json to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-450202 --- .snyk | 8 ++++++++ package.json | 10 +++++++--- 2 files changed, 15 insertions(+), 3 deletions(-) create mode 100644 .snyk diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..45c8a04 --- /dev/null +++ b/.snyk @@ -0,0 +1,8 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.13.5 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-450202: + - mongoose > async > lodash: + patched: '2019-07-03T22:18:27.661Z' diff --git a/package.json b/package.json index a608fef..98bc8e5 100644 --- a/package.json +++ b/package.json @@ -26,12 +26,16 @@ "q": "~1.0.1", "redis": "~0.10.3", "socket.io": "~2.0.2", - "url": "^0.10.1" + "url": "^0.10.1", + "snyk": "^1.189.0" }, "devDependencies": {}, "scripts": { - "test": "echo \"Error: no test specified\" && exit 1" + "test": "echo \"Error: no test specified\" && exit 1", + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" }, "author": "", - "license": "ISC" + "license": "ISC", + "snyk": true }