From be3b441364c2d17554e8103669c7496ad1b59a89 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 5 May 2020 08:59:00 +0200 Subject: [PATCH 1/2] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- package.json | 13 ++++++++----- 1 file changed, 8 insertions(+), 5 deletions(-) diff --git a/package.json b/package.json index 0d8da45..79add21 100644 --- a/package.json +++ b/package.json @@ -11,7 +11,9 @@ "pretest": "eslint lib spec *.js", "snyk&test": "snyk test && node spec/support/jasmine-runner.js", "test": "node spec/support/jasmine-runner.js", - "debug": "node debug spec/support/jasmine-runner.js" + "debug": "node debug spec/support/jasmine-runner.js", + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" }, "keywords": [ "cli", @@ -27,14 +29,14 @@ "get-folder-size": "^1.0.0", "inquirer": "^3.2.2", "mime": "^1.4.1", - "minimist": "^1.2.0" + "minimist": "^1.2.0", + "snyk": "^1.317.0" }, "devDependencies": { "eslint": "^3.19.0", "eslint-config-defaults": "^9.0.0", "jasmine": "^2.7.0", - "jasmine-spec-reporter": "^4.2.0", - "snyk": "^1.62.2" + "jasmine-spec-reporter": "^4.2.0" }, "repository": { "type": "git", @@ -43,5 +45,6 @@ "bugs": { "url": "https://github.com/stojanovic/scottyjs/issues" }, - "homepage": "https://github.com/stojanovic/scottyjs#readme" + "homepage": "https://github.com/stojanovic/scottyjs#readme", + "snyk": true } From 4cb4acf23dc4342db2441b10f197ce4c412ab41a Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 5 May 2020 08:59:01 +0200 Subject: [PATCH 2/2] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- .snyk | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/.snyk b/.snyk index 2711ec0..fa659b7 100644 --- a/.snyk +++ b/.snyk @@ -1,9 +1,13 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.10.1 +version: v1.14.1 # ignores vulnerabilities until expiry date; change duration by modifying expiry date ignore: 'npm:crypto-browserify:20140722': - aws-sdk > crypto-browserify: reason: No patch available expires: '2018-01-26T14:26:53.888Z' -patch: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - inquirer > lodash: + patched: '2020-05-05T06:58:57.532Z'