From cd16f9b6cfecd05e25160e1eca7a07afd2909b36 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 1 May 2020 10:51:57 +0530 Subject: [PATCH 1/2] fix: tutorial/12-flow/.snyk & tutorial/12-flow/package.json to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- tutorial/12-flow/.snyk | 12 ++++++++++++ 1 file changed, 12 insertions(+) create mode 100644 tutorial/12-flow/.snyk diff --git a/tutorial/12-flow/.snyk b/tutorial/12-flow/.snyk new file mode 100644 index 00000000..e99a1305 --- /dev/null +++ b/tutorial/12-flow/.snyk @@ -0,0 +1,12 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.14.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - react-redux > lodash: + patched: '2020-05-01T05:21:55.437Z' + - redux > lodash: + patched: '2020-05-01T05:21:55.437Z' + - redux-actions > lodash: + patched: '2020-05-01T05:21:55.437Z' From 0cbebe0f69cd05e065c31b31a3e9e6675369a9b9 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 1 May 2020 10:51:58 +0530 Subject: [PATCH 2/2] fix: tutorial/12-flow/.snyk & tutorial/12-flow/package.json to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- tutorial/12-flow/package.json | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/tutorial/12-flow/package.json b/tutorial/12-flow/package.json index e09361d3..7447121e 100644 --- a/tutorial/12-flow/package.json +++ b/tutorial/12-flow/package.json @@ -5,7 +5,9 @@ "scripts": { "start": "gulp", "test": "gulp test", - "tutorial-test": "gulp main" + "tutorial-test": "gulp main", + "snyk-protect": "snyk protect", + "prepare": "yarn run snyk-protect" }, "eslintConfig": { "extends": [ @@ -48,7 +50,8 @@ "react-redux": "^4.4.5", "redux": "^3.6.0", "redux-actions": "^0.12.0", - "redux-immutable": "^3.0.8" + "redux-immutable": "^3.0.8", + "snyk": "^1.316.1" }, "devDependencies": { "babel-eslint": "^7.0.0", @@ -76,5 +79,6 @@ }, "repository": "verekia/js-stack-from-scratch", "author": "Jonathan Verrecchia - @verekia", - "license": "MIT" + "license": "MIT", + "snyk": true }