Skip to content
This repository has been archived by the owner on Nov 25, 2019. It is now read-only.

Commit

Permalink
fix: package.json & .snyk to reduce vulnerabilities
Browse files Browse the repository at this point in the history
The following vulnerabilities are fixed with a Snyk patch:
- https://snyk.io/vuln/npm:hoek:20180212

Latest report for alorel/heroku-cors-proxy:
https://snyk.io/test/github/alorel/heroku-cors-proxy
  • Loading branch information
snyk-bot committed Jun 19, 2018
1 parent 61f2b84 commit ab96e7d
Show file tree
Hide file tree
Showing 2 changed files with 29 additions and 3 deletions.
22 changes: 22 additions & 0 deletions .snyk
Original file line number Diff line number Diff line change
@@ -0,0 +1,22 @@
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
version: v1.12.0
ignore: {}
# patches apply the minimum changes required to fix a vulnerability
patch:
'npm:hoek:20180212':
- shrink-ray-current > node-zopfli > node-pre-gyp > hawk > hoek:
patched: '2018-06-19T05:23:31.503Z'
- shrink-ray-current > node-zopfli > node-pre-gyp > hawk > boom > hoek:
patched: '2018-06-19T05:23:31.503Z'
- shrink-ray-current > node-zopfli > node-pre-gyp > hawk > sntp > hoek:
patched: '2018-06-19T05:23:31.503Z'
- shrink-ray-current > node-zopfli > node-pre-gyp > hawk > cryptiles > boom > hoek:
patched: '2018-06-19T05:23:31.503Z'
- shrink-ray-current > node-zopfli > node-pre-gyp > request > hawk > hoek:
patched: '2018-06-19T05:23:31.503Z'
- shrink-ray-current > node-zopfli > node-pre-gyp > request > hawk > boom > hoek:
patched: '2018-06-19T05:23:31.503Z'
- shrink-ray-current > node-zopfli > node-pre-gyp > request > hawk > sntp > hoek:
patched: '2018-06-19T05:23:31.503Z'
- shrink-ray-current > node-zopfli > node-pre-gyp > request > hawk > cryptiles > boom > hoek:
patched: '2018-06-19T05:23:31.503Z'
10 changes: 7 additions & 3 deletions package.json
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,9 @@
"scripts": {
"test": "cross-env LOG_LEVEL=emerg nyc mocha -r mocha-setup.js --timeout 20000 --globals \"expect assert request\" -c ./server/**/*.spec.js ./server/*.spec.js",
"reinstall": "rm -rf node_modules package-lock.json && npm install",
"start": "node server/index.js"
"start": "node server/index.js",
"snyk-protect": "snyk protect",
"prepare": "npm run snyk-protect"
},
"repository": {
"type": "git",
Expand All @@ -35,7 +37,8 @@
"request": "^2.83.0",
"shrink-ray-current": "^2.1.0",
"throng": "^4.0.0",
"winston": "^2.4.0"
"winston": "^2.4.0",
"snyk": "^1.83.0"
},
"devDependencies": {
"chai": "^4.1.2",
Expand All @@ -45,5 +48,6 @@
"mocha": "^5.0.0",
"nyc": "^12.0.1",
"supertest": "^3.0.0"
}
},
"snyk": true
}

0 comments on commit ab96e7d

Please sign in to comment.