.snyk

# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
version: v1.25.0
# ignores vulnerabilities until expiry date; change duration by modifying expiry date
ignore:
  'snyk:lic:npm:shescape:MPL-2.0':
    - '*':
        reason: --about lists all dependency licenses which is a requirement of MPL-2.0
        expires: 2122-12-14T16:35:38.252Z
        created: 2022-11-14T16:35:38.260Z
  SNYK-JS-CROSSSPAWN-8303230:
    - '*':
        reason: No direct upgrade path available
        expires: 2025-01-01T00:12:20.523Z
        created: 2024-11-08T10:22:20.531Z
  SNYK-JS-SOURCEMAPSUPPORT-6112477:
    - '*':
        reason: Not directely exploitable
        expires: 2025-01-01T00:12:20.523Z
        created: 2024-11-08T10:22:20.531Z

patch: {}
exclude:
  code:
    - test/**
    # Remove the following line, once we can apply consistent ignores via the Web UIs
    - scripts/upgrade-snyk-go-dependencies.go
    - release-scripts/write-ls-protocol-version.go