Merge daa6e55 into b28ce2b

.snyk

@@ -0,0 +1,24 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.13.5
+ignore: {}
+# patches apply the minimum changes required to fix a vulnerability
+patch:
+  SNYK-JS-LODASH-450202:
+    - cheerio > lodash:
+        patched: '2019-07-04T06:23:35.738Z'
+    - elasticsearch > lodash:
+        patched: '2019-07-04T06:23:35.738Z'
+    - node-sass > lodash:
+        patched: '2019-07-04T06:23:35.738Z'
+    - mongoose > async > lodash:
+        patched: '2019-07-04T06:23:35.738Z'
+    - node-sass > sass-graph > lodash:
+        patched: '2019-07-04T06:23:35.738Z'
+    - node-sass > gaze > globule > lodash:
+        patched: '2019-07-04T06:23:35.738Z'
+    - pug > pug-code-gen > constantinople > babel-types > lodash:
+        patched: '2019-07-04T06:23:35.738Z'
+    - pug > pug-filters > constantinople > babel-types > lodash:
+        patched: '2019-07-04T06:23:35.738Z'
+    - pug > pug-code-gen > pug-attrs > constantinople > babel-types > lodash:
+        patched: '2019-07-04T06:23:35.738Z'

package.json

@@ -6,7 +6,9 @@
   "private": true,
   "scripts": {
     "test": "mocha --exit && NODE_ENV=production mocha --exit",
-    "coverage": "node_modules/.bin/istanbul cover --report lcovonly node_modules/.bin/_mocha -- --exit -R spec"
+    "coverage": "node_modules/.bin/istanbul cover --report lcovonly node_modules/.bin/_mocha -- --exit -R spec",
+    "snyk-protect": "snyk protect",
+    "prepublish": "npm run snyk-protect"
   },
   "repository": {
     "type": "git",
@@ -32,11 +34,13 @@
     "sharp": "^0.21.1",
     "spdy": "^4.0.0",
     "uglify-js": "^3.4.9",
-    "ws": "^6.1.2"
+    "ws": "^6.1.2",
+    "snyk": "^1.189.0"
   },
   "devDependencies": {
     "mocha": "*",
     "should": "*",
     "supertest": "*"
-  }
+  },
+  "snyk": true
 }