Merge branch 'staging' into staging

.snyk

@@ -0,0 +1,34 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.13.5
+ignore: {}
+# patches apply the minimum changes required to fix a vulnerability
+patch:
+  SNYK-JS-LODASH-450202:
+    - codemirror-graphql > graphql-language-service-interface > graphql-language-service-utils > graphql-language-service-types > graphql-config > lodash:
+        patched: '2019-07-04T08:21:07.817Z'
+    - '@angular/cli > inquirer > lodash':
+        patched: '2019-07-04T08:21:07.817Z'
+    - codemirror-graphql > graphql-language-service-interface > graphql-config > lodash:
+        patched: '2019-07-04T08:21:07.817Z'
+    - codemirror-graphql > graphql-language-service-interface > graphql-config > graphql-import > lodash:
+        patched: '2019-07-04T08:21:07.817Z'
+    - codemirror-graphql > graphql-language-service-interface > graphql-language-service-types > graphql-config > lodash:
+        patched: '2019-07-04T08:21:07.817Z'
+    - codemirror-graphql > graphql-language-service-interface > graphql-language-service-parser > graphql-config > lodash:
+        patched: '2019-07-04T08:21:07.817Z'
+    - codemirror-graphql > graphql-language-service-interface > graphql-language-service-utils > graphql-config > lodash:
+        patched: '2019-07-04T08:21:07.817Z'
+    - opencollective > inquirer > lodash:
+        patched: '2019-07-04T08:21:07.817Z'
+    - codemirror-graphql > graphql-language-service-interface > graphql-language-service-types > graphql-config > graphql-import > lodash:
+        patched: '2019-07-04T08:21:07.817Z'
+    - codemirror-graphql > graphql-language-service-interface > graphql-language-service-utils > graphql-config > graphql-import > lodash:
+        patched: '2019-07-04T08:21:07.817Z'
+    - codemirror-graphql > graphql-language-service-interface > graphql-language-service-parser > graphql-language-service-types > graphql-config > lodash:
+        patched: '2019-07-04T08:21:07.817Z'
+    - codemirror-graphql > graphql-language-service-interface > graphql-language-service-parser > graphql-config > graphql-import > lodash:
+        patched: '2019-07-04T08:21:07.817Z'
+    - codemirror-graphql > graphql-language-service-interface > graphql-language-service-parser > graphql-language-service-types > graphql-config > graphql-import > lodash:
+        patched: '2019-07-04T08:21:07.817Z'
+    - codemirror-graphql > graphql-language-service-interface > graphql-language-service-utils > graphql-language-service-types > graphql-config > graphql-import > lodash:
+        patched: '2019-07-04T08:21:07.817Z'

package.json

@@ -40,7 +40,9 @@
     "publish-packages": "npm run build && lerna bootstrap && npm run lerna-publish",
     "generate-settings-schema": "./node_modules/.bin/typescript-json-schema --ignoreErrors src/app/reducers/settings/settings.ts State > src/app/utils/settings.schema.json",
     "compile-settings-schema-validator": "ajv compile -s src/app/utils/settings.schema.json -o src/app/utils/validate_settings_schema.js",
-    "generate-settings-schema-validator": "npm run generate-settings-schema && npm run compile-settings-schema-validator"
+    "generate-settings-schema-validator": "npm run generate-settings-schema && npm run compile-settings-schema-validator",
+    "snyk-protect": "snyk protect",
+    "prepublish": "npm run snyk-protect"
   },
   "engines": {
     "node": ">= 6.9.1"
@@ -118,7 +120,8 @@
     "to-snake-case": "^1.0.0",
     "uuid": "^3.1.0",
     "valid-url": "^1.0.9",
-    "zone.js": "^0.8.20"
+    "zone.js": "^0.8.20",
+    "snyk": "^1.189.0"
   },
   "devDependencies": {
     "@angular-devkit/build-angular": "~0.10.0",
@@ -176,5 +179,6 @@
     "type": "opencollective",
     "url": "https://opencollective.com/altair",
     "logo": "https://opencollective.com/altair/logo.txt"
-  }
+  },
+  "snyk": true
 }