Merge 3d295b7 into 36ab896

.snyk

@@ -0,0 +1,8 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.12.0
+ignore: {}
+# patches apply the minimum changes required to fix a vulnerability
+patch:
+  'npm:lodash:20180130':
+    - hw-logger > lodash:
+        patched: '2018-07-05T02:44:15.293Z'

package.json

@@ -11,7 +11,9 @@
     "coveralls": "npm run cover -- -- -R spec && cat dist/coverage/lcov.info | coveralls && rimraf dist/coverage",
     "build:doc": "yuidoc -c yuidoc.json .",
     "start:doc": "yuidoc -c yuidoc.json --server 3900",
-    "browse:doc": "xdg-open http://localhost:3900/"
+    "browse:doc": "xdg-open http://localhost:3900/",
+    "snyk-protect": "snyk protect",
+    "prepare": "npm run snyk-protect"
   },
   "author": "Olivier Penhoat <openhoat@gmail.com> (http://headwood.net/)",
   "license": "MIT",
@@ -32,7 +34,8 @@
     "lodash": "4.16.2",
     "require-directory": "2.1.1",
     "traverse": "0.6.6",
-    "uuid": "2.0.3"
+    "uuid": "2.0.3",
+    "snyk": "^1.88.1"
   },
   "devDependencies": {
     "chai": "3.5.0",
@@ -51,5 +54,6 @@
   "optionalDependencies": {
     "hiredis": "0.5.0",
     "redis": "2.6.2"
-  }
+  },
+  "snyk": true
 }