diff --git a/.snyk b/.snyk index 9858d54..a398737 100644 --- a/.snyk +++ b/.snyk @@ -1,6 +1,13 @@ -version: v1.5.0 +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.12.0 ignore: {} +# patches apply the minimum changes required to fix a vulnerability patch: 'npm:tough-cookie:20160722': - npm > request > tough-cookie: patched: '2016-07-25T09:56:44.179Z' + 'npm:lodash:20180130': + - npm > cli-table2 > lodash: + patched: '2018-07-04T03:13:50.260Z' + - npm > npm-audit-report > cli-table2 > lodash: + patched: '2018-07-04T03:13:50.260Z' diff --git a/package.json b/package.json index 620a543..ef38980 100644 --- a/package.json +++ b/package.json @@ -29,7 +29,7 @@ "npm": "latest", "npm-check": "5.4.0", "open": "0.0.5", - "snyk": "^1.17.1" + "snyk": "^1.88.1" }, "devDependencies": { "codecov": "2.1.0", @@ -53,7 +53,9 @@ "report": "nyc report --reporter=html", "test:istanbul": "istanbul cover --report html --dir externals/coverage _mocha test/*.js", "test:report": "npm run test && npm run report", - "coverage": "nyc report --reporter=text-lcov > coverage.lcov && codecov" + "coverage": "nyc report --reporter=text-lcov > coverage.lcov && codecov", + "snyk-protect": "snyk protect", + "prepare": "npm run snyk-protect" }, "snyk": true }