From 212a4735c1b297d52e213de62c31bf65f983a0ed Mon Sep 17 00:00:00 2001 From: snyk-test Date: Fri, 5 Jul 2019 00:40:22 +0000 Subject: [PATCH] fix: .snyk & package.json to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-450202 --- .snyk | 10 ++++++++++ package.json | 10 +++++++--- 2 files changed, 17 insertions(+), 3 deletions(-) create mode 100644 .snyk diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..646ee47 --- /dev/null +++ b/.snyk @@ -0,0 +1,10 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.13.5 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-450202: + - lodash: + patched: '2019-07-05T00:40:19.929Z' + - mongoose > async > lodash: + patched: '2019-07-05T00:40:19.929Z' diff --git a/package.json b/package.json index bf1ddb4..a9fbfe8 100644 --- a/package.json +++ b/package.json @@ -8,7 +8,9 @@ "test-client": "gulp client.unit_test", "test-server": "mocha ./tests/server/**/*_test.js --recursive --check-leaks --reporter min --require babel/register", "coverage-server": "istanbul cover ./node_modules/mocha/bin/_mocha -- tests/*_test.js --require babel/register", - "coveralls-server": "istanbul cover ./node_modules/mocha/bin/_mocha -- tests/*_test.js --require babel/register --report lcovonly && cat ./coverage/lcov.info | ./node_modules/coveralls/bin/coveralls.js && rm -rf ./coverage" + "coveralls-server": "istanbul cover ./node_modules/mocha/bin/_mocha -- tests/*_test.js --require babel/register --report lcovonly && cat ./coverage/lcov.info | ./node_modules/coveralls/bin/coveralls.js && rm -rf ./coverage", + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" }, "dependencies": { "angular2": "^2.0.0-beta.9", @@ -29,7 +31,8 @@ "rxjs": "^5.0.0-beta.2", "systemjs": "^0.19.5", "typescript": "^1.7.3", - "zone.js": "^0.5.10" + "zone.js": "^0.5.10", + "snyk": "^1.192.0" }, "devDependencies": { "karma-ng-html2js-preprocessor": "^0.1.2", @@ -83,5 +86,6 @@ "engines": { "node": "stable" }, - "subdomain": "itranga-temple" + "subdomain": "itranga-temple", + "snyk": true } \ No newline at end of file