diff --git a/.snyk b/.snyk
new file mode 100644
index 0000000..b21dcd8
--- /dev/null
+++ b/.snyk
@@ -0,0 +1,12 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.13.5
+ignore: {}
+# patches apply the minimum changes required to fix a vulnerability
+patch:
+  'npm:lodash:20180130':
+    - insight-lite-api > litecore-lib > lodash:
+        patched: '2019-11-22T07:11:39.677Z'
+    - litecore-node > litecore-lib > lodash:
+        patched: '2019-11-22T07:11:39.677Z'
+    - insight-lite-api > litecore-message > litecore-lib > lodash:
+        patched: '2019-11-22T07:11:39.677Z'
diff --git a/package.json b/package.json
index 2710b9e..8b48ba0 100644
--- a/package.json
+++ b/package.json
@@ -9,7 +9,9 @@
   "main": "index.js",
   "scripts": {
     "test": "mocha test/** --recursive",
-    "build-deb": "./scripts/build-deb"
+    "build-deb": "./scripts/build-deb",
+    "snyk-protect": "snyk protect",
+    "prepublish": "npm run snyk-protect"
   },
   "bin": {
     "litecore": "./bin/litecore",
@@ -96,7 +98,8 @@
     "litecore-lib": "flash-coin/litecore-lib",
     "litecore-node": "flash-coin/litecore-node",
     "insight-lite-api": "flash-coin/insight-lite-api",
-    "insight-lite-ui": "flash-coin/insight-lite-ui"
+    "insight-lite-ui": "flash-coin/insight-lite-ui",
+    "snyk": "^1.251.0"
   },
   "license": "MIT",
   "devDependencies": {
@@ -136,5 +139,6 @@
     "tmp": "tmp/litecore-4.1.10.tgz_1495034874818_0.9911165973171592"
   },
   "directories": {},
-  "_resolved": "https://registry.npmjs.org/litecore/-/litecore-4.1.10.tgz"
+  "_resolved": "https://registry.npmjs.org/litecore/-/litecore-4.1.10.tgz",
+  "snyk": true
 }