From f4facf554cf980de66968da299bdff8192895aae Mon Sep 17 00:00:00 2001 From: snyk-test Date: Thu, 4 Jul 2019 04:55:07 +0000 Subject: [PATCH] fix: .snyk & package.json to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-450202 --- .snyk | 62 ++++++++++++++++++++++++++++++++++++++++++++++++++++ package.json | 10 ++++++--- 2 files changed, 69 insertions(+), 3 deletions(-) create mode 100644 .snyk diff --git a/.snyk b/.snyk new file mode 100644 index 000000000..1122947dd --- /dev/null +++ b/.snyk @@ -0,0 +1,62 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.13.5 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-450202: + - loopback-datasource-juggler > loopback-connector > async > lodash: + patched: '2019-07-04T04:55:05.110Z' + - async > lodash: + patched: '2019-07-04T04:55:05.110Z' + - loopback-datasource-juggler > lodash: + patched: '2019-07-04T04:55:05.110Z' + - loopback-phase > strong-globalize > lodash: + patched: '2019-07-04T04:55:05.110Z' + - loopback-datasource-juggler > async > lodash: + patched: '2019-07-04T04:55:05.110Z' + - loopback-phase > async > lodash: + patched: '2019-07-04T04:55:05.110Z' + - strong-remoting > jayson > lodash: + patched: '2019-07-04T04:55:05.110Z' + - loopback-connector-remote > loopback-datasource-juggler > lodash: + patched: '2019-07-04T04:55:05.110Z' + - strong-remoting > async > lodash: + patched: '2019-07-04T04:55:05.110Z' + - strong-remoting > strong-globalize > lodash: + patched: '2019-07-04T04:55:05.110Z' + - loopback-datasource-juggler > strong-globalize > lodash: + patched: '2019-07-04T04:55:05.110Z' + - loopback-datasource-juggler > loopback-connector > strong-globalize > lodash: + patched: '2019-07-04T04:55:05.110Z' + - loopback-connector-remote > loopback-datasource-juggler > strong-globalize > lodash: + patched: '2019-07-04T04:55:05.110Z' + - strong-globalize > g11n-pipeline > swagger-client > lodash: + patched: '2019-07-04T04:55:05.110Z' + - strong-globalize > lodash: + patched: '2019-07-04T04:55:05.110Z' + - loopback-connector-remote > loopback-datasource-juggler > async > lodash: + patched: '2019-07-04T04:55:05.110Z' + - strong-remoting > loopback-phase > strong-globalize > lodash: + patched: '2019-07-04T04:55:05.110Z' + - loopback-connector-remote > strong-remoting > jayson > lodash: + patched: '2019-07-04T04:55:05.110Z' + - strong-remoting > strong-error-handler > strong-globalize > lodash: + patched: '2019-07-04T04:55:05.110Z' + - strong-remoting > loopback-phase > async > lodash: + patched: '2019-07-04T04:55:05.110Z' + - loopback-connector-remote > strong-remoting > async > lodash: + patched: '2019-07-04T04:55:05.110Z' + - loopback-connector-remote > strong-remoting > strong-globalize > lodash: + patched: '2019-07-04T04:55:05.110Z' + - loopback-connector-remote > loopback-datasource-juggler > loopback-connector > async > lodash: + patched: '2019-07-04T04:55:05.110Z' + - loopback-connector-remote > strong-remoting > loopback-phase > async > lodash: + patched: '2019-07-04T04:55:05.110Z' + - loopback-connector-remote > loopback-datasource-juggler > loopback-connector > strong-globalize > lodash: + patched: '2019-07-04T04:55:05.110Z' + - loopback-connector-remote > strong-remoting > loopback-phase > strong-globalize > lodash: + patched: '2019-07-04T04:55:05.110Z' + - loopback-connector-remote > strong-remoting > strong-error-handler > strong-globalize > lodash: + patched: '2019-07-04T04:55:05.110Z' + - strong-globalize > g11n-pipeline > swagger-client > isomorphic-form-data > form-data > async > lodash: + patched: '2019-07-04T04:55:05.110Z' diff --git a/package.json b/package.json index 0b4c71612..b2b42b731 100644 --- a/package.json +++ b/package.json @@ -31,7 +31,9 @@ "scripts": { "lint": "grunt eslint", "coverage": "nyc report --reporter=text-lcov | coveralls", - "test": "nyc grunt mocha-and-karma" + "test": "nyc grunt mocha-and-karma", + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" }, "engines": { "node": ">=4.0.0" @@ -58,7 +60,8 @@ "strong-globalize": "^2.7.0", "strong-remoting": "^3.0.0", "uid2": "0.0.3", - "underscore.string": "^3.0.3" + "underscore.string": "^3.0.3", + "snyk": "^1.189.0" }, "devDependencies": { "babel-preset-es2015": "^6.22.0", @@ -117,5 +120,6 @@ "debug": "*,-mocha:*,-eslint:*" } }, - "license": "MIT" + "license": "MIT", + "snyk": true }