Skip to content

Commit

Permalink
fix: package.json, package-lock.json & .snyk to reduce vulnerabilities
Browse files Browse the repository at this point in the history
The following vulnerabilities are fixed with a Snyk patch:
- https://snyk.io/vuln/SNYK-JS-LODASH-567746
  • Loading branch information
snyk-bot committed May 30, 2020
1 parent e10ee60 commit 1a672f4
Show file tree
Hide file tree
Showing 2 changed files with 28 additions and 3 deletions.
22 changes: 22 additions & 0 deletions .snyk
Original file line number Diff line number Diff line change
@@ -0,0 +1,22 @@
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
version: v1.14.1
ignore: {}
# patches apply the minimum changes required to fix a vulnerability
patch:
SNYK-JS-LODASH-567746:
- stylelint > @stylelint/postcss-css-in-js > @babel/core > lodash:
patched: '2020-05-30T00:50:32.962Z'
- stylelint > @stylelint/postcss-css-in-js > @babel/core > @babel/helper-module-transforms > lodash:
patched: '2020-05-30T00:50:32.962Z'
- eslint-config-stylelint > eslint-plugin-jest > @typescript-eslint/experimental-utils > @typescript-eslint/typescript-estree > lodash:
patched: '2020-05-30T00:50:32.962Z'
- stylelint > @stylelint/postcss-css-in-js > @babel/core > @babel/helpers > @babel/traverse > lodash:
patched: '2020-05-30T00:50:32.962Z'
- stylelint > @stylelint/postcss-css-in-js > @babel/core > @babel/helper-module-transforms > @babel/helper-replace-supers > @babel/traverse > lodash:
patched: '2020-05-30T00:50:32.962Z'
- stylelint > @stylelint/postcss-css-in-js > @babel/core > @babel/helper-module-transforms > @babel/helper-replace-supers > @babel/traverse > @babel/generator > lodash:
patched: '2020-05-30T00:50:32.962Z'
- stylelint > @stylelint/postcss-css-in-js > @babel/core > @babel/helper-module-transforms > @babel/helper-replace-supers > @babel/traverse > @babel/helper-split-export-declaration > @babel/types > lodash:
patched: '2020-05-30T00:50:32.962Z'
- stylelint > @stylelint/postcss-css-in-js > @babel/core > @babel/helper-module-transforms > @babel/helper-replace-supers > @babel/traverse > @babel/helper-function-name > @babel/template > @babel/types > lodash:
patched: '2020-05-30T00:50:32.962Z'
9 changes: 6 additions & 3 deletions package.json
Original file line number Diff line number Diff line change
Expand Up @@ -43,7 +43,9 @@
"task-webpack-app": "cross-env NODE_ENV=production node node_modules/gulp/bin/gulp webpack:app --serverConfig=/env/config/hapi/config --gulpTaskConfig=/env/config/",
"task-svgo": "cross-env NODE_ENV=build node node_modules/gulp/bin/gulp svgo --serverConfig=/env/config/hapi/config --gulpTaskConfig=/env/config/",
"task-svg-symbols": "cross-env NODE_ENV=build node node_modules/gulp/bin/gulp svg-symbols --serverConfig=/env/config/hapi/config --gulpTaskConfig=/env/config/",
"deploy-now": "npm run build && now ./build -A ../now.json"
"deploy-now": "npm run build && now ./build -A ../now.json",
"snyk-protect": "snyk protect",
"prepare": "npm run snyk-protect"
},
"dependencies": {
"acorn": "7.2.0",
Expand Down Expand Up @@ -101,7 +103,7 @@
"regenerator-runtime": "0.13.5",
"requestidlecallback": "^0.3.0",
"script-loader": "0.7.2",
"snyk": "1.332.1",
"snyk": "^1.332.1",
"string-replace-loader": "2.3.0",
"template-helpers": "1.0.1",
"uglifyjs-webpack-plugin": "2.2.0",
Expand Down Expand Up @@ -142,5 +144,6 @@
"webpack-dev-middleware": "3.7.2",
"webpack-hot-middleware": "2.25.0",
"webpack-pwa-manifest": "4.2.0"
}
},
"snyk": true
}

0 comments on commit 1a672f4

Please sign in to comment.