From 7d01ae2ab710e43eed7571140996eff8f82c6d05 Mon Sep 17 00:00:00 2001
From: snyk-bot <admin+snyk-bot@snyk.io>
Date: Fri, 29 Sep 2017 00:47:08 +0000
Subject: [PATCH] fix: package.json & .snyk to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/npm:debug:20170905
- https://snyk.io/vuln/npm:mime:20170907
- https://snyk.io/vuln/npm:debug:20170905
- https://snyk.io/vuln/npm:fresh:20170908


The following vulnerabilities are fixed with a Snyk patch:
- https://snyk.io/vuln/npm:debug:20170905

Latest report for pol-is/polisserver:
https://snyk.io/test/github/pol-is/polisserver
---
 .snyk        |  8 ++++++++
 package.json | 14 +++++++++-----
 2 files changed, 17 insertions(+), 5 deletions(-)
 create mode 100644 .snyk

diff --git a/.snyk b/.snyk
new file mode 100644
index 0000000000..d56af70857
--- /dev/null
+++ b/.snyk
@@ -0,0 +1,8 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.7.1
+ignore: {}
+# patches apply the minimum changes required to fix a vulnerability
+patch:
+  'npm:debug:20170905':
+    - express > connect > serve-index > debug:
+        patched: '2017-09-29T00:47:08.555Z'
diff --git a/package.json b/package.json
index 0e59c7d127..18a3817f70 100644
--- a/package.json
+++ b/package.json
@@ -4,7 +4,9 @@
   "description": "polis =====",
   "main": "app.js",
   "scripts": {
-    "test": "echo \"Error: no test specified\" && exit 1"
+    "test": "echo \"Error: no test specified\" && exit 1",
+    "snyk-protect": "snyk protect",
+    "prepublish": "npm run snyk-protect"
   },
   "engines": {
     "node": "6.11.1",
@@ -26,9 +28,9 @@
     "bcrypt": "0.8.6",
     "bluebird": "3.5.0",
     "boolean": "^0.1.3",
-    "connect-timeout": "1.7.0",
+    "connect-timeout": "1.8.0",
     "eslint": "2.13.1",
-    "express": "3.21.2",
+    "express": "4.16.0",
     "fb": "1.0.2",
     "http-proxy": "0.10.4",
     "intercom-client": "^2.8.0",
@@ -54,9 +56,11 @@
     "stripe": "~2.5.0",
     "underscore": "1.8.3",
     "valid-url": "1.0.9",
-    "winston": "1.0.2"
+    "winston": "1.0.2",
+    "snyk": "^1.41.1"
   },
   "optionalDependencies": {
     "polisServerBrand": "git+https://github.com/colinmegill/polisServerBrand.git#master"
-  }
+  },
+  "snyk": true
 }