From 21d64648a69368db66d89603540402c51ad31c73 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 3 Sep 2021 06:15:53 +0000 Subject: [PATCH] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/npm:hoek:20180212 The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:hoek:20180212 --- .snyk | 14 ++++++++++++++ package.json | 24 ++++++++++++++---------- 2 files changed, 28 insertions(+), 10 deletions(-) create mode 100644 .snyk diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..5cc96b0 --- /dev/null +++ b/.snyk @@ -0,0 +1,14 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.21.5 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:hoek:20180212': + - good-loggly > loggly > request > hawk > hoek: + patched: '2021-09-03T06:15:51.558Z' + - good-loggly > loggly > request > hawk > boom > hoek: + patched: '2021-09-03T06:15:51.558Z' + - good-loggly > loggly > request > hawk > sntp > hoek: + patched: '2021-09-03T06:15:51.558Z' + - good-loggly > loggly > request > hawk > cryptiles > boom > hoek: + patched: '2021-09-03T06:15:51.558Z' diff --git a/package.json b/package.json index 090295f..41cfe61 100644 --- a/package.json +++ b/package.json @@ -8,7 +8,9 @@ "test": "npm run test:api && npm run test:e2e", "test:api": "ava test/ava --verbose --timeout 3s", "test:e2e": "codeceptjs run test/e2e --steps", - "serve:react-mui": "webpack-dev-server --config './apps/react-mui/webpack.config.js'" + "serve:react-mui": "webpack-dev-server --config './apps/react-mui/webpack.config.js'", + "prepublish": "npm run snyk-protect", + "snyk-protect": "snyk-protect" }, "repository": { "type": "git", @@ -27,25 +29,26 @@ }, "homepage": "https://github.com/adrianblynch/hapi-everything#readme", "dependencies": { - "blipp": "^2.3.0", + "blipp": "^3.0.0", "boom": "^3.1.2", "catbox": "^7.1.0", - "catbox-redis": "^1.0.10", - "good": "^6.5.0", - "good-console": "^5.3.1", - "good-loggly": "^2.0.0", + "catbox-redis": "^2.0.1", + "good": "^7.1.0", + "good-console": "^6.1.2", + "good-loggly": "^3.0.0", "hapi": "^12.1.0", "hapi-mongodb": "^5.0.0", "hapi-swagger": "^4.0.0", - "inert": "^3.2.0", + "inert": "^4.0.0", "joi": "^7.2.3", "material-ui": "^0.15.0", "node-uuid": "^1.4.7", - "orientjs": "^2.2.0-beta2", + "orientjs": "^3.0.0", "react": "^15.0.2", "react-dom": "^15.0.2", "react-tap-event-plugin": "^1.0.0", - "vision": "^4.0.1" + "vision": "^4.0.1", + "@snyk/protect": "latest" }, "devDependencies": { "ava": "^0.14.0", @@ -56,5 +59,6 @@ "request-promise": "^3.0.0", "tv": "^5.0.2", "webpack": "^1.13.0" - } + }, + "snyk": true }