Skip to content

Commit

Permalink
Fix snyk (#23)
Browse files Browse the repository at this point in the history
* Fix .snyk format

* Add snyk to fail test on new vulnerabilities
  • Loading branch information
esarafianou authored and MarcinHoppe committed Oct 23, 2018
1 parent 6a9ae27 commit 2f02e52
Show file tree
Hide file tree
Showing 2 changed files with 9 additions and 8 deletions.
6 changes: 3 additions & 3 deletions .snyk
Expand Up @@ -2,10 +2,10 @@
version: v1.12.0
# ignores vulnerabilities until expiry date; change duration by modifying expiry date
ignore:
chownr@1.0.1:
- '*':
'npm:chownr:20180731':
- bcrypt > node-pre-gyp > tar > chownr:
reason: >-
It does not affect us. bcrypt doesnt use the vulnerable dependency in
runtime, just when installing
expires: 2020-01-01T00:00:00.000Z
expires: '2020-01-01T00:00:00.000Z'
patch: {}
11 changes: 6 additions & 5 deletions package.json
Expand Up @@ -5,17 +5,18 @@
"main": "magic.js",
"license": "MIT",
"repository": {
"type": "git",
"url": "https://github.com/auth0/magic.git"
"type": "git",
"url": "https://github.com/auth0/magic.git"
},
"dependencies": {
"bcrypt": "3.0.0",
"libsodium-wrappers-sumo": "0.7.3"
},
"scripts": {
"test": "./node_modules/.bin/mocha --delay ./test/magic.test.js ./test/magic.test.vectors.js"
"test": "snyk test && ./node_modules/.bin/mocha --delay ./test/magic.test.js ./test/magic.test.vectors.js"
},
"devDependencies": {
"mocha": "^5.1.1"
"mocha": "^5.1.1",
"snyk": "^1.104.2"
}
}
}

0 comments on commit 2f02e52

Please sign in to comment.