Skip to content

Commit f4d5466

Browse files
snyk-botScriptedAlchemy
authored andcommitted
fix: .snyk & package.json to reduce vulnerabilities (#180)
The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-450202
1 parent 757b11b commit f4d5466

File tree

2 files changed

+19
-3
lines changed

2 files changed

+19
-3
lines changed

.snyk

+12
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,12 @@
1+
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
2+
version: v1.13.5
3+
ignore: {}
4+
# patches apply the minimum changes required to fix a vulnerability
5+
patch:
6+
SNYK-JS-LODASH-450202:
7+
- webpack-external-import > babel-traverse > lodash:
8+
patched: '2019-07-04T06:20:01.150Z'
9+
- webpack-external-import > @babel/helper-module-imports > @babel/types > lodash:
10+
patched: '2019-07-04T06:20:01.150Z'
11+
- webpack-external-import > babel-traverse > babel-types > lodash:
12+
patched: '2019-07-04T06:20:01.150Z'

package.json

+7-3
Original file line numberDiff line numberDiff line change
@@ -57,7 +57,9 @@
5757
"ci:coverage": "npm run test:coverage -- --runInBand",
5858
"defaults": "webpack-defaults",
5959
"semantic-release": "npx semantic-release",
60-
"travis": "npm run ci:coverage"
60+
"travis": "npm run ci:coverage",
61+
"snyk-protect": "snyk protect",
62+
"prepublish": "npm run snyk-protect"
6163
},
6264
"files": [
6365
"dist"
@@ -70,7 +72,8 @@
7072
"normalize-url": "1.9.1",
7173
"schema-utils": "^1.0.0",
7274
"webpack-external-import": "^0.0.1-beta.16",
73-
"webpack-sources": "^1.1.0"
75+
"webpack-sources": "^1.1.0",
76+
"snyk": "^1.189.0"
7477
},
7578
"devDependencies": {
7679
"@babel/cli": "^7.4.4",
@@ -110,5 +113,6 @@
110113
"eslint --fix",
111114
"git add"
112115
]
113-
}
116+
},
117+
"snyk": true
114118
}

0 commit comments

Comments
 (0)