From 24136a29bca40aa47850ff16ea3d72f2b59e8b49 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 4 Jul 2018 03:13:51 +0000 Subject: [PATCH] fix: .snyk & package.json to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:lodash:20180130 --- .snyk | 9 ++++++++- package.json | 6 ++++-- 2 files changed, 12 insertions(+), 3 deletions(-) diff --git a/.snyk b/.snyk index 9858d54..a398737 100644 --- a/.snyk +++ b/.snyk @@ -1,6 +1,13 @@ -version: v1.5.0 +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.12.0 ignore: {} +# patches apply the minimum changes required to fix a vulnerability patch: 'npm:tough-cookie:20160722': - npm > request > tough-cookie: patched: '2016-07-25T09:56:44.179Z' + 'npm:lodash:20180130': + - npm > cli-table2 > lodash: + patched: '2018-07-04T03:13:50.260Z' + - npm > npm-audit-report > cli-table2 > lodash: + patched: '2018-07-04T03:13:50.260Z' diff --git a/package.json b/package.json index 620a543..ef38980 100644 --- a/package.json +++ b/package.json @@ -29,7 +29,7 @@ "npm": "latest", "npm-check": "5.4.0", "open": "0.0.5", - "snyk": "^1.17.1" + "snyk": "^1.88.1" }, "devDependencies": { "codecov": "2.1.0", @@ -53,7 +53,9 @@ "report": "nyc report --reporter=html", "test:istanbul": "istanbul cover --report html --dir externals/coverage _mocha test/*.js", "test:report": "npm run test && npm run report", - "coverage": "nyc report --reporter=text-lcov > coverage.lcov && codecov" + "coverage": "nyc report --reporter=text-lcov > coverage.lcov && codecov", + "snyk-protect": "snyk protect", + "prepare": "npm run snyk-protect" }, "snyk": true }