Skip to content

Commit

Permalink
Install Snyk to test for vulnerabilities
Browse files Browse the repository at this point in the history
  • Loading branch information
wulfsolter committed Jan 6, 2016
1 parent 3590056 commit 33b7ead
Show file tree
Hide file tree
Showing 2 changed files with 18 additions and 4 deletions.
10 changes: 10 additions & 0 deletions .snyk
Original file line number Diff line number Diff line change
@@ -0,0 +1,10 @@
ignore:
'npm:uglify-js:20151024':
- 'swig > uglify-js':
reason: No patch available
expires: '2016-02-05T02:49:04.784Z'
patch:
'npm:uglify-js:20151024':
- uglify-js:
patched: '2016-01-06T02:41:15.287Z'
version: v1
12 changes: 8 additions & 4 deletions package.json
Original file line number Diff line number Diff line change
Expand Up @@ -41,7 +41,8 @@
"morgan": "1.6.1",
"serve-favicon": "2.3.0",
"swig": "1.4.2",
"underscore": "~1.8.0"
"underscore": "~1.8.0",
"snyk": "^1.8.3"
},
"devDependencies": {
"chai": "3.3.0",
Expand All @@ -54,12 +55,15 @@
"jshint": "jshint -c .jshintrc --exclude-path .jshintignore .",
"jscs": "jscs .",
"start": "node app",
"test": "./node_modules/mocha/bin/mocha"
"test": "snyk test && ./node_modules/mocha/bin/mocha",
"snyk-protect": "snyk protect",
"postinstall": "npm run snyk-protect"
},
"pre-commit": [
"jshint",
"jscs",
"test"
],
"main": "./middleware"
}
"main": "./middleware",
"snyk": true
}

1 comment on commit 33b7ead

@remy
Copy link

@remy remy commented on 33b7ead Feb 18, 2016

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hey @wulfsolter - I appreciate this was a month ago now, but I'm part of the Snyk team, and specifically I work on the snyk module (that includes the wizard, patching and so on). I just wanted to ask what the reason was behind removing Snyk from your package? Really just hoping for feedback that can improve the software.

We did find that there was some wizard problems with policies and used your specific package (at 0.29.3) to test and deploy fixes (now live in 1.11.0).

Thanks in advance!

Please sign in to comment.