Skip to content

Commit fbf1ce0

Browse files
committed
fix: package.json & .snyk to reduce vulnerabilities
The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746
1 parent 0184210 commit fbf1ce0

File tree

2 files changed

+15
-3
lines changed

2 files changed

+15
-3
lines changed

.snyk

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
2+
version: v1.25.0
3+
ignore: {}
4+
# patches apply the minimum changes required to fix a vulnerability
5+
patch:
6+
SNYK-JS-LODASH-567746:
7+
- '@contentstack/datasync-manager > lodash':
8+
patched: '2022-05-18T00:31:43.230Z'

package.json

Lines changed: 7 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -6,14 +6,17 @@
66
"scripts": {
77
"continue": "node index.js",
88
"start": "npm run clean && node index.js",
9-
"clean": "rimraf .ledger .token .checkpoint unprocessible/"
9+
"clean": "rimraf .ledger .token .checkpoint unprocessible/",
10+
"prepublish": "npm run snyk-protect",
11+
"snyk-protect": "snyk-protect"
1012
},
1113
"dependencies": {
1214
"@contentstack/datasync-asset-store-filesystem": "1.0.0",
1315
"@contentstack/datasync-content-store-filesystem": "1.0.1",
1416
"@contentstack/datasync-content-store-mongodb": "1.0.1",
1517
"@contentstack/webhook-listener": "1.0.0",
16-
"@contentstack/datasync-manager": "1.2.0"
18+
"@contentstack/datasync-manager": "1.2.0",
19+
"@snyk/protect": "latest"
1720
},
1821
"devDependencies": {
1922
"eslint": "^6.1.0",
@@ -24,5 +27,6 @@
2427
"url": "https://github.com/contentstack/datasync-boilerplate"
2528
},
2629
"author": "Contentstack LLC <[email protected]>",
27-
"license": "MIT"
30+
"license": "MIT",
31+
"snyk": true
2832
}

0 commit comments

Comments
 (0)