From aa042ddcd9ddb43b8655962231d2d1180ac54b1d Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 1 May 2020 03:53:35 +0200 Subject: [PATCH] fix: package.json, package-lock.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- .snyk | 38 ++++++++++++++++++++++++++++++++++++++ 1 file changed, 38 insertions(+) create mode 100644 .snyk diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..b342f89 --- /dev/null +++ b/.snyk @@ -0,0 +1,38 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.14.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - '@semantic-release/git > lodash': + patched: '2020-05-01T01:51:54.456Z' + - semantic-release > lodash: + patched: '2020-05-01T01:51:54.456Z' + - gulp-eslint > eslint > lodash: + patched: '2020-05-01T01:51:54.456Z' + - mocha > yargs-unparser > lodash: + patched: '2020-05-01T01:51:54.456Z' + - semantic-release > @semantic-release/release-notes-generator > lodash: + patched: '2020-05-01T01:51:54.456Z' + - gulp-eslint > eslint > inquirer > lodash: + patched: '2020-05-01T01:51:54.456Z' + - gulp-eslint > eslint > table > lodash: + patched: '2020-05-01T01:51:54.456Z' + - gulp-mocha > mocha > yargs-unparser > lodash: + patched: '2020-05-01T01:51:54.456Z' + - nyc > istanbul-lib-instrument > @babel/core > lodash: + patched: '2020-05-01T01:51:54.456Z' + - semantic-release > @semantic-release/release-notes-generator > conventional-commits-parser > lodash: + patched: '2020-05-01T01:51:54.456Z' + - semantic-release > @semantic-release/release-notes-generator > conventional-changelog-writer > lodash: + patched: '2020-05-01T01:51:54.456Z' + - nyc > istanbul-lib-instrument > @babel/core > @babel/traverse > lodash: + patched: '2020-05-01T01:51:54.456Z' + - nyc > istanbul-lib-instrument > @babel/core > @babel/helpers > @babel/traverse > lodash: + patched: '2020-05-01T01:51:54.456Z' + - nyc > istanbul-lib-instrument > @babel/core > @babel/helpers > @babel/traverse > @babel/generator > lodash: + patched: '2020-05-01T01:51:54.456Z' + - nyc > istanbul-lib-instrument > @babel/core > @babel/helpers > @babel/traverse > @babel/helper-split-export-declaration > @babel/types > lodash: + patched: '2020-05-01T01:51:54.456Z' + - nyc > istanbul-lib-instrument > @babel/core > @babel/helpers > @babel/traverse > @babel/helper-function-name > @babel/helper-get-function-arity > @babel/types > lodash: + patched: '2020-05-01T01:51:54.456Z'