diff --git a/.snyk b/.snyk new file mode 100644 index 000000000..fbcd79680 --- /dev/null +++ b/.snyk @@ -0,0 +1,26 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.13.5 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-450202: + - styled-components > babel-plugin-styled-components > lodash: + patched: '2019-11-13T10:27:57.501Z' + - styled-components > @babel/traverse > lodash: + patched: '2019-11-13T10:27:57.501Z' + - request-promise-native > request-promise-core > lodash: + patched: '2019-11-13T10:27:57.501Z' + - styled-components > @babel/traverse > @babel/types > lodash: + patched: '2019-11-13T10:27:57.501Z' + - styled-components > babel-plugin-styled-components > @babel/helper-annotate-as-pure > @babel/types > lodash: + patched: '2019-11-13T10:27:57.501Z' + - styled-components > @babel/traverse > @babel/generator > @babel/types > lodash: + patched: '2019-11-13T10:27:57.501Z' + - react-select > @emotion/css > babel-plugin-emotion > @babel/helper-module-imports > @babel/types > lodash: + patched: '2019-11-13T10:27:57.501Z' + - styled-components > @babel/traverse > @babel/helper-function-name > @babel/helper-get-function-arity > @babel/types > lodash: + patched: '2019-11-13T10:27:57.501Z' + - react-spinners > @emotion/core > @emotion/css > babel-plugin-emotion > @babel/helper-module-imports > @babel/types > lodash: + patched: '2019-11-13T10:27:57.501Z' + - react-select > @emotion/core > @emotion/css > babel-plugin-emotion > @babel/helper-module-imports > @babel/types > lodash: + patched: '2019-11-13T10:27:57.501Z' diff --git a/package.json b/package.json index ff8e5fa74..6531c3f80 100644 --- a/package.json +++ b/package.json @@ -34,7 +34,8 @@ "string-hash": "^1.1.3", "styled-components": "^4.3.2", "unstated": "^2.1.1", - "unstated-debug": "^0.3.2" + "unstated-debug": "^0.3.2", + "snyk": "^1.246.0" }, "scripts": { "analyze": "source-map-explorer 'build/static/js/*.js'", @@ -42,7 +43,9 @@ "build": "react-scripts --max_old_space_size=5048 build", "test": "react-scripts test", "eject": "react-scripts eject", - "lint:fix": "eslint './src/**/*.{ts,tsx}' --fix" + "lint:fix": "eslint './src/**/*.{ts,tsx}' --fix", + "snyk-protect": "snyk protect", + "prepare": "yarn run snyk-protect" }, "husky": { "hooks": { @@ -96,5 +99,6 @@ "not dead", "not ie <= 11", "not op_mini all" - ] + ], + "snyk": true }