Merge pull request #1465 from LiskHQ/snyk-fix-xmvls7

[Snyk] Fix for 2 vulnerable dependencies

.snyk

@@ -0,0 +1,22 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.13.1
+ignore: {}
+# patches apply the minimum changes required to fix a vulnerability
+patch:
+  'npm:hoek:20180212':
+    - '@ledgerhq/hw-transport-node-hid > usb > node-pre-gyp > hawk > hoek':
+        patched: '2018-11-07T14:22:37.169Z'
+    - '@ledgerhq/hw-transport-node-hid > usb > node-pre-gyp > hawk > boom > hoek':
+        patched: '2018-11-07T14:22:37.169Z'
+    - '@ledgerhq/hw-transport-node-hid > usb > node-pre-gyp > hawk > sntp > hoek':
+        patched: '2018-11-07T14:22:37.169Z'
+    - '@ledgerhq/hw-transport-node-hid > usb > node-pre-gyp > request > hawk > hoek':
+        patched: '2018-11-07T14:22:37.169Z'
+    - '@ledgerhq/hw-transport-node-hid > usb > node-pre-gyp > hawk > cryptiles > boom > hoek':
+        patched: '2018-11-07T14:22:37.169Z'
+    - '@ledgerhq/hw-transport-node-hid > usb > node-pre-gyp > request > hawk > boom > hoek':
+        patched: '2018-11-07T14:22:37.169Z'
+    - '@ledgerhq/hw-transport-node-hid > usb > node-pre-gyp > request > hawk > sntp > hoek':
+        patched: '2018-11-07T14:22:37.169Z'
+    - '@ledgerhq/hw-transport-node-hid > usb > node-pre-gyp > request > hawk > cryptiles > boom > hoek':
+        patched: '2018-11-07T14:22:37.169Z'

package.json

@@ -33,7 +33,9 @@
     "pack:win": "cmd /c npm install && npm run clean-build && npm run copy-files && npm run build-prod && npm run build-electron && npm run clean-dist && npm run dist:win",
     "storybook": "start-storybook -p 6006 -s ./src/",
     "build-storybook": "build-storybook",
-    "serve": "http-server"
+    "serve": "http-server",
+    "snyk-protect": "snyk protect",
+    "prepare": "npm run snyk-protect"
   },
   "author": "Lisk Foundation <admin@lisk.io>, lightcurve GmbH <admin@lightcurve.io>",
   "license": "GPL-3.0",
@@ -79,7 +81,7 @@
     "react-copy-to-clipboard": "5.0.1",
     "react-countdown-now": "1.2.0",
     "react-css-themr": "=2.1.2",
-    "react-dom": "=16.2.0",
+    "react-dom": "=16.2.1",
     "react-i18next": "=6.0.6",
     "react-joyride": "1.11.4",
     "react-redux": "5.0.6",
@@ -91,7 +93,8 @@
     "redux": "3.7.2",
     "redux-thunk": "=2.2.0",
     "socket.io-client": "=2.0.3",
-    "webpack-merge": "=4.1.0"
+    "webpack-merge": "=4.1.0",
+    "snyk": "^1.108.0"
   },
   "devDependencies": {
     "@storybook/addon-actions": "3.2.12",
@@ -237,5 +240,6 @@
     "ignore": [
       "postcss-cssnext"
     ]
-  }
+  },
+  "snyk": true
 }