From a44de572d236c0ca7fe6b607081c46137da04599 Mon Sep 17 00:00:00 2001 From: snyk-test Date: Thu, 4 Jul 2019 03:43:28 +0000 Subject: [PATCH] fix: .snyk & package.json to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-450202 --- .snyk | 20 ++++++++++++++++++++ package.json | 40 +++++++++++++++++++++++----------------- 2 files changed, 43 insertions(+), 17 deletions(-) create mode 100644 .snyk diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..b329015 --- /dev/null +++ b/.snyk @@ -0,0 +1,20 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.13.5 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-450202: + - grunt-contrib-watch > lodash: + patched: '2019-07-04T03:43:18.016Z' + - grunt > grunt-legacy-log > lodash: + patched: '2019-07-04T03:43:18.016Z' + - grunt > grunt-legacy-util > lodash: + patched: '2019-07-04T03:43:18.016Z' + - grunt-contrib-clean > async > lodash: + patched: '2019-07-04T03:43:18.016Z' + - grunt-contrib-watch > async > lodash: + patched: '2019-07-04T03:43:18.016Z' + - grunt > grunt-legacy-log > grunt-legacy-log-utils > lodash: + patched: '2019-07-04T03:43:18.016Z' + - grunt-contrib-watch > gaze > globule > lodash: + patched: '2019-07-04T03:43:18.016Z' diff --git a/package.json b/package.json index 46756ef..2446121 100644 --- a/package.json +++ b/package.json @@ -1,19 +1,25 @@ { - "name": "niagara", - "description": "Project workflow engine.", - "author": "Richeve S. Bebedor", - "version": "0.1.0", - "repository": { - "type": "git", - "url": "https://github.com/volkovasystems/niagara.git" - }, - "dependencies": { - "async": "x.x.x", - "underscore": "x.x.x", - "string": "x.x.x", - "grunt": "x.x.x", - "grunt-contrib-clean": "x.x.x", - "grunt-contrib-copy": "x.x.x", - "grunt-contrib-watch": "x.x.x" - } + "name": "niagara", + "description": "Project workflow engine.", + "author": "Richeve S. Bebedor", + "version": "0.1.0", + "repository": { + "type": "git", + "url": "https://github.com/volkovasystems/niagara.git" + }, + "dependencies": { + "async": "x.x.x", + "underscore": "x.x.x", + "string": "x.x.x", + "grunt": "x.x.x", + "grunt-contrib-clean": "x.x.x", + "grunt-contrib-copy": "x.x.x", + "grunt-contrib-watch": "x.x.x", + "snyk": "^1.189.0" + }, + "scripts": { + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" + }, + "snyk": true } \ No newline at end of file