Merge pull request #5 from TNOCS/snyk-fix-edeaede1

erikvullings · web-flow · commit 0c9275c80935 · 2017-02-18T11:11:26.000+01:00
[Snyk] Fix for 3 vulnerable dependency paths
diff --git a/.snyk b/.snyk
@@ -0,0 +1,13 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.7.0
+ignore: {}
+# patches apply the minimum changes required to fix a vulnerability
+patch:
+  'npm:moment:20161019':
+    - mosca > moment:
+        patched: '2017-02-18T10:10:46.080Z'
+  'npm:ws:20160104':
+    - hypertimer > ws:
+        patched: '2017-02-18T10:10:46.080Z'
+    - csweb > hypertimer > ws:
+        patched: '2017-02-18T10:10:46.080Z'
diff --git a/package.json b/package.json
@@ -17,15 +17,18 @@
     "postinstall": "typings install && npm run tsc",
     "tsc": "./node_modules/.bin/tsc",
     "tsc:w": "./node_modules/.bin/tsc -w",
-    "typings": "typings"
+    "typings": "typings",
+    "snyk-protect": "snyk protect",
+    "prepublish": "npm run snyk-protect"
   },
   "dependencies": {
     "csweb": "^0.3.1",
     "fs-extra": "^0.30.0",
     "hypertimer": "^2.1.3",
     "mosca": "^2.1.0",
     "setprototypeof": "^1.0.1",
-    "winston": "^2.1.0"
+    "winston": "^2.1.0",
+    "snyk": "^1.25.0"
   },
   "devDependencies": {
     "chokidar": "^1.2.0",
@@ -58,5 +61,6 @@
   "bugs": {
     "url": "https://github.com/TNOCS/csWeb/issues"
   },
-  "homepage": "https://github.com/TNOCS/csWeb"
+  "homepage": "https://github.com/TNOCS/csWeb",
+  "snyk": true
 }
