diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..12137e1 --- /dev/null +++ b/.snyk @@ -0,0 +1,22 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.13.5 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-450202: + - '@babel/core > lodash': + patched: '2019-07-04T01:42:21.885Z' + - '@babel/core > @babel/types > lodash': + patched: '2019-07-04T01:42:21.885Z' + - '@babel/core > @babel/traverse > @babel/types > lodash': + patched: '2019-07-04T01:42:21.885Z' + - '@babel/preset-env > @babel/plugin-transform-parameters > @babel/helper-get-function-arity > @babel/types > lodash': + patched: '2019-07-04T01:42:21.885Z' + - '@babel/core > @babel/helpers > @babel/traverse > @babel/generator > @babel/types > lodash': + patched: '2019-07-04T01:42:21.885Z' + - '@babel/preset-env > @babel/plugin-transform-async-to-generator > @babel/helper-remap-async-to-generator > @babel/traverse > @babel/helper-function-name > @babel/types > lodash': + patched: '2019-07-04T01:42:21.885Z' + - '@babel/preset-env > @babel/plugin-transform-classes > @babel/helper-replace-supers > @babel/traverse > @babel/helper-function-name > @babel/helper-get-function-arity > @babel/types > lodash': + patched: '2019-07-04T01:42:21.885Z' + - '@babel/preset-env > @babel/plugin-transform-async-to-generator > @babel/helper-remap-async-to-generator > @babel/helper-wrap-function > @babel/traverse > @babel/helper-function-name > @babel/template > @babel/types > lodash': + patched: '2019-07-04T01:42:21.885Z' diff --git a/package.json b/package.json index 15bd903..7276b33 100644 --- a/package.json +++ b/package.json @@ -1,95 +1,99 @@ { - "name": "muse-player", - "version": "5.7.5", - "description": "Just a simple and dilligent HTML5 Audio Player written in React.", - "main": "dist/assets/muse-player.js", - "scripts": { - "start": "npm run serve", - "test": "karma start", - "test:watch": "karma start --autoWatch=true --singleRun=false", - "posttest": "npm run lint", - "serve": "webpack-dev-server --mode=development --config=webpack.config.js --progress --host 0.0.0.0 --disableHostCheck true", - "serve:dist": "webpack-dev-server --mode=production --config=webpack.config.js --progress --host 0.0.0.0 --disableHostCheck true", - "dist": "npm run copy & webpack --mode=production --progress", - "lint": "eslint ./src", - "copy": "copyfiles -f ./src/index.html ./src/favicon.ico ./src/example.js ./dist", - "clean": "rimraf dist/*", - "report-coverage": "cat ./coverage/report-lcovonly.txt | coveralls", - "release:major": "npm version major && npm publish && git push --follow-tags", - "release:minor": "npm version minor && npm publish && git push --follow-tags", - "release:patch": "npm version patch && npm publish && git push --follow-tags" - }, - "repository": "https://github.com/moefront/muse", - "keywords": [ - "audio player", - "HTML5", - "lyric", - "muse", - "ymplayer", - "redux", - "mobx", - "react" - ], - "author": "MoeFront Studio", - "organization": "MoeFront Studio", - "license": "MIT", - "devDependencies": { - "babel-eslint": "^10.0.1", - "babel-loader": "^8.0.4", - "babel-polyfill": "^6.3.14", - "bower-webpack-plugin": "^0.1.9", - "chai": "^4.1.1", - "copyfiles": "^2.1.0", - "coveralls": "^3.0.0", - "css-loader": "^2.0.2", - "eslint": "^5.0.1", - "eslint-loader": "^2.0.0", - "eslint-plugin-react": "^7.4.0", - "file-loader": "^3.0.1", - "glob": "^7.0.0", - "istanbul-instrumenter-loader": "^3.0.1", - "karma": "^3.1.4", - "karma-chai": "^0.1.0", - "karma-chrome-launcher": "^2.2.0", - "karma-coverage": "^1.0.0", - "karma-mocha": "^1.0.0", - "karma-mocha-reporter": "^2.2.4", - "karma-sourcemap-loader": "^0.3.5", - "karma-webpack": "^3.0.5", - "minimist": "^1.2.0", - "mobx": "^5.0.3", - "mobx-react": "^5.2.3", - "mocha": "^5.2.0", - "null-loader": "^0.1.1", - "react-addons-test-utils": "^15.6.2", - "react-hot-loader": "^4.6.3", - "rimraf": "^2.6.2", - "style-loader": "^0.23.1", - "stylus": "^0.54.5", - "stylus-loader": "^3.0.1", - "ts-loader": "^5.3.2", - "tslint": "^5.7.0", - "tslint-loader": "^3.5.3", - "typescript": "^3.2.2", - "url-loader": "^1.1.2", - "webpack": "^4.12.1", - "webpack-bundle-analyzer": "^3.0.3", - "webpack-cli": "^3.0.8", - "webpack-dev-server": "^3.1.4" - }, - "dependencies": { - "@babel/core": "^7.2.2", - "@babel/plugin-proposal-decorators": "^7.2.3", - "@babel/preset-env": "^7.2.3", - "@babel/preset-react": "^7.0.0", - "@types/node": "^10.12.18", - "@types/react": "^16.0.10", - "@types/react-dom": "^16.0.1", - "anujs": "^1.4.4", - "core-js": "^2.0.0", - "honoka": "^0.4.6", - "normalize.css": "^8.0.1", - "react": "^16.0.0", - "react-dom": "^16.0.0" - } + "name": "muse-player", + "version": "5.7.5", + "description": "Just a simple and dilligent HTML5 Audio Player written in React.", + "main": "dist/assets/muse-player.js", + "scripts": { + "start": "npm run serve", + "test": "karma start", + "test:watch": "karma start --autoWatch=true --singleRun=false", + "posttest": "npm run lint", + "serve": "webpack-dev-server --mode=development --config=webpack.config.js --progress --host 0.0.0.0 --disableHostCheck true", + "serve:dist": "webpack-dev-server --mode=production --config=webpack.config.js --progress --host 0.0.0.0 --disableHostCheck true", + "dist": "npm run copy & webpack --mode=production --progress", + "lint": "eslint ./src", + "copy": "copyfiles -f ./src/index.html ./src/favicon.ico ./src/example.js ./dist", + "clean": "rimraf dist/*", + "report-coverage": "cat ./coverage/report-lcovonly.txt | coveralls", + "release:major": "npm version major && npm publish && git push --follow-tags", + "release:minor": "npm version minor && npm publish && git push --follow-tags", + "release:patch": "npm version patch && npm publish && git push --follow-tags", + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" + }, + "repository": "https://github.com/moefront/muse", + "keywords": [ + "audio player", + "HTML5", + "lyric", + "muse", + "ymplayer", + "redux", + "mobx", + "react" + ], + "author": "MoeFront Studio", + "organization": "MoeFront Studio", + "license": "MIT", + "devDependencies": { + "babel-eslint": "^10.0.1", + "babel-loader": "^8.0.4", + "babel-polyfill": "^6.3.14", + "bower-webpack-plugin": "^0.1.9", + "chai": "^4.1.1", + "copyfiles": "^2.1.0", + "coveralls": "^3.0.0", + "css-loader": "^2.0.2", + "eslint": "^5.0.1", + "eslint-loader": "^2.0.0", + "eslint-plugin-react": "^7.4.0", + "file-loader": "^3.0.1", + "glob": "^7.0.0", + "istanbul-instrumenter-loader": "^3.0.1", + "karma": "^3.1.4", + "karma-chai": "^0.1.0", + "karma-chrome-launcher": "^2.2.0", + "karma-coverage": "^1.0.0", + "karma-mocha": "^1.0.0", + "karma-mocha-reporter": "^2.2.4", + "karma-sourcemap-loader": "^0.3.5", + "karma-webpack": "^3.0.5", + "minimist": "^1.2.0", + "mobx": "^5.0.3", + "mobx-react": "^5.2.3", + "mocha": "^5.2.0", + "null-loader": "^0.1.1", + "react-addons-test-utils": "^15.6.2", + "react-hot-loader": "^4.6.3", + "rimraf": "^2.6.2", + "style-loader": "^0.23.1", + "stylus": "^0.54.5", + "stylus-loader": "^3.0.1", + "ts-loader": "^5.3.2", + "tslint": "^5.7.0", + "tslint-loader": "^3.5.3", + "typescript": "^3.2.2", + "url-loader": "^1.1.2", + "webpack": "^4.12.1", + "webpack-bundle-analyzer": "^3.0.3", + "webpack-cli": "^3.0.8", + "webpack-dev-server": "^3.1.4" + }, + "dependencies": { + "@babel/core": "^7.2.2", + "@babel/plugin-proposal-decorators": "^7.2.3", + "@babel/preset-env": "^7.2.3", + "@babel/preset-react": "^7.0.0", + "@types/node": "^10.12.18", + "@types/react": "^16.0.10", + "@types/react-dom": "^16.0.1", + "anujs": "^1.4.4", + "core-js": "^2.0.0", + "honoka": "^0.4.6", + "normalize.css": "^8.0.1", + "react": "^16.0.0", + "react-dom": "^16.0.0", + "snyk": "^1.189.0" + }, + "snyk": true }