Skip to content

Commit d6c3169

Browse files
snyk-botidanto
authored andcommitted
fix: .snyk & package.json to reduce vulnerabilities (#77)
The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-450202
1 parent afbb783 commit d6c3169

2 files changed

Lines changed: 15 additions & 3 deletions

File tree

.snyk

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
2+
version: v1.13.5
3+
ignore: {}
4+
# patches apply the minimum changes required to fix a vulnerability
5+
patch:
6+
SNYK-JS-LODASH-450202:
7+
- api-schema-builder > json-schema-deref-sync > lodash:
8+
patched: '2019-07-04T04:52:25.335Z'

package.json

Lines changed: 7 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,9 @@
3232
"test": "nyc node_modules/mocha/bin/_mocha --recursive ./test/*/*/*-test.js ./test/*/*-test.js ./test/*-test.js && npm run lint:types",
3333
"node6-test": "nyc node_modules/mocha/bin/_mocha --recursive ./test/express/*/*-test.js ./test/express/*-test.js ./test/*-test.js",
3434
"coveralls": "cat ./coverage/lcov.info | ./node_modules/.bin/coveralls",
35-
"doctoc": "npm install -g doctoc && doctoc README.md"
35+
"doctoc": "npm install -g doctoc && doctoc README.md",
36+
"snyk-protect": "snyk protect",
37+
"prepublish": "npm run snyk-protect"
3638
},
3739
"repository": {
3840
"type": "git",
@@ -57,7 +59,8 @@
5759
"license": "Apache-2.0",
5860
"dependencies": {
5961
"api-schema-builder": "^1.0.9",
60-
"memoizee": "^0.4.14"
62+
"memoizee": "^0.4.14",
63+
"snyk": "^1.189.0"
6164
},
6265
"devDependencies": {
6366
"@typescript-eslint/eslint-plugin": "^1.9.0",
@@ -93,5 +96,6 @@
9396
},
9497
"publishConfig": {
9598
"registry": "https://registry.npmjs.org/"
96-
}
99+
},
100+
"snyk": true
97101
}

0 commit comments

Comments
 (0)