From e9be0fb3b188edb031c8697edebf6982f2770b59 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 1 May 2020 06:10:29 +0530 Subject: [PATCH 1/2] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- package.json | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/package.json b/package.json index bf1ddb4..34b7cff 100644 --- a/package.json +++ b/package.json @@ -8,7 +8,9 @@ "test-client": "gulp client.unit_test", "test-server": "mocha ./tests/server/**/*_test.js --recursive --check-leaks --reporter min --require babel/register", "coverage-server": "istanbul cover ./node_modules/mocha/bin/_mocha -- tests/*_test.js --require babel/register", - "coveralls-server": "istanbul cover ./node_modules/mocha/bin/_mocha -- tests/*_test.js --require babel/register --report lcovonly && cat ./coverage/lcov.info | ./node_modules/coveralls/bin/coveralls.js && rm -rf ./coverage" + "coveralls-server": "istanbul cover ./node_modules/mocha/bin/_mocha -- tests/*_test.js --require babel/register --report lcovonly && cat ./coverage/lcov.info | ./node_modules/coveralls/bin/coveralls.js && rm -rf ./coverage", + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" }, "dependencies": { "angular2": "^2.0.0-beta.9", @@ -29,7 +31,8 @@ "rxjs": "^5.0.0-beta.2", "systemjs": "^0.19.5", "typescript": "^1.7.3", - "zone.js": "^0.5.10" + "zone.js": "^0.5.10", + "snyk": "^1.316.1" }, "devDependencies": { "karma-ng-html2js-preprocessor": "^0.1.2", @@ -83,5 +86,6 @@ "engines": { "node": "stable" }, - "subdomain": "itranga-temple" + "subdomain": "itranga-temple", + "snyk": true } \ No newline at end of file From 994594f00be577fc6d560766792e805febf9b8ea Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 1 May 2020 06:10:30 +0530 Subject: [PATCH 2/2] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- .snyk | 10 ++++++++++ 1 file changed, 10 insertions(+) create mode 100644 .snyk diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..bc90559 --- /dev/null +++ b/.snyk @@ -0,0 +1,10 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.14.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - lodash: + patched: '2020-05-01T00:40:26.501Z' + - mongoose > async > lodash: + patched: '2020-05-01T00:40:26.501Z'