diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..26f0bb3 --- /dev/null +++ b/.snyk @@ -0,0 +1,5 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.13.5 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: diff --git a/package.json b/package.json index dbaaa90..047bb96 100644 --- a/package.json +++ b/package.json @@ -30,7 +30,7 @@ "lint-tests": "tsc -p ./tsconfig.test.json; eslint . --ext .js,.ts --parser-options=project:./tsconfig.test.json", "precommit": "pretty-quick --staged", "test": "jest --coverage", - "travisci": "npm run lint && npm run test && codecov" + "travisci": "npm run lint && npm run test && codecov && npx snyk test" }, "devDependencies": { "@babel/cli": "^7.5.5", @@ -72,5 +72,6 @@ "escape-string-regexp": "^1.0.5", "pandemonium": "^1.4.1", "regexp-tree": "0.1.11" - } + }, + "snyk": true }