From fb9a02de5982f5aec941712827d5283752f06a94 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sun, 1 Jul 2018 02:56:27 +0000 Subject: [PATCH] fix: .snyk & package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/npm:mime:20170907 The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:mime:20170907 --- .snyk | 8 ++++++++ package.json | 14 +++++++++----- 2 files changed, 17 insertions(+), 5 deletions(-) create mode 100644 .snyk diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..515b165 --- /dev/null +++ b/.snyk @@ -0,0 +1,8 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.12.0 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:mime:20170907': + - express > accepts > mime: + patched: '2018-07-01T02:56:25.850Z' diff --git a/package.json b/package.json index 08f721f..42a1982 100644 --- a/package.json +++ b/package.json @@ -6,7 +6,9 @@ "scripts": { "start": "node lib/server.js", "test": "HOST=0.0.0.0 node_modules/mocha/bin/_mocha --timeout 15000 test/{**,**/*}/*.test.js", - "gems": "sh bootstrap.sh" + "gems": "sh bootstrap.sh", + "snyk-protect": "snyk protect", + "prepare": "npm run snyk-protect" }, "author": "Remy Sharp", "license": "MIT", @@ -15,9 +17,9 @@ "LiveScript": "^1.2.0", "axon": "~2.0.0", "babel-core": "^5.8.23", - "body-parser": "~1.0.2", + "body-parser": "~1.3.1", "coffee-script": "~1.7.1", - "express": "~4.1.1", + "express": "~4.16.0", "gaze": "~0.6.4", "jade": "^1.11.0", "less": "^2.5.1", @@ -26,10 +28,12 @@ "myth": "^1.4.0", "ps-tree": "~0.0.3", "rsvp": "~3.0.1", - "stylus": "^0.51.1" + "stylus": "^0.51.1", + "snyk": "^1.88.0" }, "devDependencies": { "mocha": "~1.18.2", "should": "~4.0.4" - } + }, + "snyk": true }