From af85ae6281c8e869b4a4c5499794db3cd09ad972 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Sun, 1 Jul 2018 05:28:03 +0000
Subject: [PATCH] fix: .snyk & package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/npm:mime:20170907


The following vulnerabilities are fixed with a Snyk patch:
- https://snyk.io/vuln/npm:mime:20170907
- https://snyk.io/vuln/npm:tunnel-agent:20170305
---
 .snyk        | 15 +++++++++++++++
 package.json | 14 +++++++++-----
 2 files changed, 24 insertions(+), 5 deletions(-)
 create mode 100644 .snyk

diff --git a/.snyk b/.snyk
new file mode 100644
index 0000000..b8a6e94
--- /dev/null
+++ b/.snyk
@@ -0,0 +1,15 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.12.0
+ignore: {}
+# patches apply the minimum changes required to fix a vulnerability
+patch:
+  'npm:mime:20170907':
+    - express > accepts > mime:
+        patched: '2018-07-01T05:28:01.758Z'
+    - tty.js > express > send > mime:
+        patched: '2018-07-01T05:28:01.758Z'
+    - tty.js > express > connect > send > mime:
+        patched: '2018-07-01T05:28:01.758Z'
+  'npm:tunnel-agent:20170305':
+    - log4js > loggly > request > tunnel-agent:
+        patched: '2018-07-01T05:28:01.758Z'
diff --git a/package.json b/package.json
index 380c18f..aa6c8b7 100644
--- a/package.json
+++ b/package.json
@@ -5,7 +5,9 @@
   "main": "server.js",
   "scripts": {
     "test": "node_modules/mocha/bin/mocha ut/mocha.js --timeout 10000",
-    "jslint": "jslint 'apps/*.js' 'server.js'"
+    "jslint": "jslint 'apps/*.js' 'server.js'",
+    "snyk-protect": "snyk protect",
+    "prepare": "npm run snyk-protect"
   },
   "repository": {
     "type": "git",
@@ -19,7 +21,7 @@
     "assert": "*",
     "bluebird": "*",
     "optimist": "*",
-    "express": "~4.0.0",
+    "express": "~4.16.0",
     "express-session": "*",
     "express-http-proxy": "*",
     "passport": ">= 0.0.0",
@@ -27,7 +29,7 @@
     "deasync": "*",
     "data.io": "*",
     "tingodb": "0.3.5",
-    "pouchdb": "3.1.0",
+    "pouchdb": "6.3.0",
     "swagger-tools": "*",
     "body-parser": "*",
     "chai": "*",
@@ -56,7 +58,8 @@
     "shelljs": "*",
     "tcp-port-used": "*",
     "tingyun": "*",
-    "tty.js": "*"
+    "tty.js": "*",
+    "snyk": "^1.88.0"
   },
   "author": "Zhizhou Li",
   "license": "GPL",
@@ -68,5 +71,6 @@
   "keywords": [
     "Restapi",
     "node"
-  ]
+  ],
+  "snyk": true
 }