Skip to content

Commit

Permalink
fix: .snyk & package.json to reduce vulnerabilities
Browse files Browse the repository at this point in the history
The following vulnerabilities are fixed with a Snyk patch:
- https://snyk.io/vuln/SNYK-JS-LODASH-450202
  • Loading branch information
snyk-test committed Jul 4, 2019
1 parent 402edb0 commit 3db4bbf
Show file tree
Hide file tree
Showing 2 changed files with 19 additions and 3 deletions.
12 changes: 12 additions & 0 deletions .snyk
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
version: v1.13.5
ignore: {}
# patches apply the minimum changes required to fix a vulnerability
patch:
SNYK-JS-LODASH-450202:
- restify-clients > lodash:
patched: '2019-07-04T05:59:19.221Z'
- restify-clients > restify-errors > lodash:
patched: '2019-07-04T05:59:19.221Z'
- restify-clients > restify-errors > @netflix/nerror > lodash:
patched: '2019-07-04T05:59:19.221Z'
10 changes: 7 additions & 3 deletions package.json
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,9 @@
"lint": "eslint examples src test",
"test": "mocha test/* --recursive",
"coverage": "nyc --reporter=html --reporter=text mocha test/* --recursive",
"coveralls": "nyc report --reporter=text-lcov | coveralls"
"coveralls": "nyc report --reporter=text-lcov | coveralls",
"snyk-protect": "snyk protect",
"prepublish": "npm run snyk-protect"
},
"nyc": {
"all": true,
Expand Down Expand Up @@ -44,7 +46,8 @@
"dependencies": {
"debug": "^4.1.1",
"hooker": "^0.2.3",
"restify-clients": "^2.6.6"
"restify-clients": "^2.6.6",
"snyk": "^1.189.0"
},
"devDependencies": {
"@babel/cli": "^7.4.4",
Expand All @@ -61,5 +64,6 @@
"restify": "^8.3.2",
"sinon": "^7.3.2",
"sinon-chai": "^3.3.0"
}
},
"snyk": true
}

0 comments on commit 3db4bbf

Please sign in to comment.