Skip to content

Commit

Permalink
fix: .snyk & package.json to reduce vulnerabilities
Browse files Browse the repository at this point in the history 
The following vulnerabilities are fixed with a Snyk patch:
- https://snyk.io/vuln/SNYK-JS-LODASH-450202
  • Loading branch information
snyk-test committed Jul 4, 2019
1 parent 9ee60e5 commit 2de3cd4
Show file tree
Hide file tree
Showing 2 changed files with 119 additions and 93 deletions.
22 changes: 22 additions & 0 deletions .snyk
View file
@@ -0,0 +1,22 @@
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
version: v1.13.5
ignore: {}
# patches apply the minimum changes required to fix a vulnerability
patch:
SNYK-JS-LODASH-450202:
- '@babel/core > lodash':
patched: '2019-07-04T01:42:21.885Z'
- '@babel/core > @babel/types > lodash':
patched: '2019-07-04T01:42:21.885Z'
- '@babel/core > @babel/traverse > @babel/types > lodash':
patched: '2019-07-04T01:42:21.885Z'
- '@babel/preset-env > @babel/plugin-transform-parameters > @babel/helper-get-function-arity > @babel/types > lodash':
patched: '2019-07-04T01:42:21.885Z'
- '@babel/core > @babel/helpers > @babel/traverse > @babel/generator > @babel/types > lodash':
patched: '2019-07-04T01:42:21.885Z'
- '@babel/preset-env > @babel/plugin-transform-async-to-generator > @babel/helper-remap-async-to-generator > @babel/traverse > @babel/helper-function-name > @babel/types > lodash':
patched: '2019-07-04T01:42:21.885Z'
- '@babel/preset-env > @babel/plugin-transform-classes > @babel/helper-replace-supers > @babel/traverse > @babel/helper-function-name > @babel/helper-get-function-arity > @babel/types > lodash':
patched: '2019-07-04T01:42:21.885Z'
- '@babel/preset-env > @babel/plugin-transform-async-to-generator > @babel/helper-remap-async-to-generator > @babel/helper-wrap-function > @babel/traverse > @babel/helper-function-name > @babel/template > @babel/types > lodash':
patched: '2019-07-04T01:42:21.885Z'
190 changes: 97 additions & 93 deletions package.json
View file
@@ -1,95 +1,99 @@
{
"name": "muse-player",
"version": "5.7.5",
"description": "Just a simple and dilligent HTML5 Audio Player written in React.",
"main": "dist/assets/muse-player.js",
"scripts": {
"start": "npm run serve",
"test": "karma start",
"test:watch": "karma start --autoWatch=true --singleRun=false",
"posttest": "npm run lint",
"serve": "webpack-dev-server --mode=development --config=webpack.config.js --progress --host 0.0.0.0 --disableHostCheck true",
"serve:dist": "webpack-dev-server --mode=production --config=webpack.config.js --progress --host 0.0.0.0 --disableHostCheck true",
"dist": "npm run copy & webpack --mode=production --progress",
"lint": "eslint ./src",
"copy": "copyfiles -f ./src/index.html ./src/favicon.ico ./src/example.js ./dist",
"clean": "rimraf dist/*",
"report-coverage": "cat ./coverage/report-lcovonly.txt | coveralls",
"release:major": "npm version major && npm publish && git push --follow-tags",
"release:minor": "npm version minor && npm publish && git push --follow-tags",
"release:patch": "npm version patch && npm publish && git push --follow-tags"
},
"repository": "https://github.com/moefront/muse",
"keywords": [
"audio player",
"HTML5",
"lyric",
"muse",
"ymplayer",
"redux",
"mobx",
"react"
],
"author": "MoeFront Studio",
"organization": "MoeFront Studio",
"license": "MIT",
"devDependencies": {
"babel-eslint": "^10.0.1",
"babel-loader": "^8.0.4",
"babel-polyfill": "^6.3.14",
"bower-webpack-plugin": "^0.1.9",
"chai": "^4.1.1",
"copyfiles": "^2.1.0",
"coveralls": "^3.0.0",
"css-loader": "^2.0.2",
"eslint": "^5.0.1",
"eslint-loader": "^2.0.0",
"eslint-plugin-react": "^7.4.0",
"file-loader": "^3.0.1",
"glob": "^7.0.0",
"istanbul-instrumenter-loader": "^3.0.1",
"karma": "^3.1.4",
"karma-chai": "^0.1.0",
"karma-chrome-launcher": "^2.2.0",
"karma-coverage": "^1.0.0",
"karma-mocha": "^1.0.0",
"karma-mocha-reporter": "^2.2.4",
"karma-sourcemap-loader": "^0.3.5",
"karma-webpack": "^3.0.5",
"minimist": "^1.2.0",
"mobx": "^5.0.3",
"mobx-react": "^5.2.3",
"mocha": "^5.2.0",
"null-loader": "^0.1.1",
"react-addons-test-utils": "^15.6.2",
"react-hot-loader": "^4.6.3",
"rimraf": "^2.6.2",
"style-loader": "^0.23.1",
"stylus": "^0.54.5",
"stylus-loader": "^3.0.1",
"ts-loader": "^5.3.2",
"tslint": "^5.7.0",
"tslint-loader": "^3.5.3",
"typescript": "^3.2.2",
"url-loader": "^1.1.2",
"webpack": "^4.12.1",
"webpack-bundle-analyzer": "^3.0.3",
"webpack-cli": "^3.0.8",
"webpack-dev-server": "^3.1.4"
},
"dependencies": {
"@babel/core": "^7.2.2",
"@babel/plugin-proposal-decorators": "^7.2.3",
"@babel/preset-env": "^7.2.3",
"@babel/preset-react": "^7.0.0",
"@types/node": "^10.12.18",
"@types/react": "^16.0.10",
"@types/react-dom": "^16.0.1",
"anujs": "^1.4.4",
"core-js": "^2.0.0",
"honoka": "^0.4.6",
"normalize.css": "^8.0.1",
"react": "^16.0.0",
"react-dom": "^16.0.0"
}
"name": "muse-player",
"version": "5.7.5",
"description": "Just a simple and dilligent HTML5 Audio Player written in React.",
"main": "dist/assets/muse-player.js",
"scripts": {
"start": "npm run serve",
"test": "karma start",
"test:watch": "karma start --autoWatch=true --singleRun=false",
"posttest": "npm run lint",
"serve": "webpack-dev-server --mode=development --config=webpack.config.js --progress --host 0.0.0.0 --disableHostCheck true",
"serve:dist": "webpack-dev-server --mode=production --config=webpack.config.js --progress --host 0.0.0.0 --disableHostCheck true",
"dist": "npm run copy & webpack --mode=production --progress",
"lint": "eslint ./src",
"copy": "copyfiles -f ./src/index.html ./src/favicon.ico ./src/example.js ./dist",
"clean": "rimraf dist/*",
"report-coverage": "cat ./coverage/report-lcovonly.txt | coveralls",
"release:major": "npm version major && npm publish && git push --follow-tags",
"release:minor": "npm version minor && npm publish && git push --follow-tags",
"release:patch": "npm version patch && npm publish && git push --follow-tags",
"snyk-protect": "snyk protect",
"prepublish": "npm run snyk-protect"
},
"repository": "https://github.com/moefront/muse",
"keywords": [
"audio player",
"HTML5",
"lyric",
"muse",
"ymplayer",
"redux",
"mobx",
"react"
],
"author": "MoeFront Studio",
"organization": "MoeFront Studio",
"license": "MIT",
"devDependencies": {
"babel-eslint": "^10.0.1",
"babel-loader": "^8.0.4",
"babel-polyfill": "^6.3.14",
"bower-webpack-plugin": "^0.1.9",
"chai": "^4.1.1",
"copyfiles": "^2.1.0",
"coveralls": "^3.0.0",
"css-loader": "^2.0.2",
"eslint": "^5.0.1",
"eslint-loader": "^2.0.0",
"eslint-plugin-react": "^7.4.0",
"file-loader": "^3.0.1",
"glob": "^7.0.0",
"istanbul-instrumenter-loader": "^3.0.1",
"karma": "^3.1.4",
"karma-chai": "^0.1.0",
"karma-chrome-launcher": "^2.2.0",
"karma-coverage": "^1.0.0",
"karma-mocha": "^1.0.0",
"karma-mocha-reporter": "^2.2.4",
"karma-sourcemap-loader": "^0.3.5",
"karma-webpack": "^3.0.5",
"minimist": "^1.2.0",
"mobx": "^5.0.3",
"mobx-react": "^5.2.3",
"mocha": "^5.2.0",
"null-loader": "^0.1.1",
"react-addons-test-utils": "^15.6.2",
"react-hot-loader": "^4.6.3",
"rimraf": "^2.6.2",
"style-loader": "^0.23.1",
"stylus": "^0.54.5",
"stylus-loader": "^3.0.1",
"ts-loader": "^5.3.2",
"tslint": "^5.7.0",
"tslint-loader": "^3.5.3",
"typescript": "^3.2.2",
"url-loader": "^1.1.2",
"webpack": "^4.12.1",
"webpack-bundle-analyzer": "^3.0.3",
"webpack-cli": "^3.0.8",
"webpack-dev-server": "^3.1.4"
},
"dependencies": {
"@babel/core": "^7.2.2",
"@babel/plugin-proposal-decorators": "^7.2.3",
"@babel/preset-env": "^7.2.3",
"@babel/preset-react": "^7.0.0",
"@types/node": "^10.12.18",
"@types/react": "^16.0.10",
"@types/react-dom": "^16.0.1",
"anujs": "^1.4.4",
"core-js": "^2.0.0",
"honoka": "^0.4.6",
"normalize.css": "^8.0.1",
"react": "^16.0.0",
"react-dom": "^16.0.0",
"snyk": "^1.189.0"
},
"snyk": true
}

0 comments on commit 2de3cd4

Please sign in to comment.