From 1391c1e5e729a07bc319dca85a31264bcfb41340 Mon Sep 17 00:00:00 2001 From: snyk-test Date: Thu, 4 Jul 2019 06:30:08 +0000 Subject: [PATCH] fix: packages/gatsby-plugin-page-creator/.snyk & packages/gatsby-plugin-page-creator/package.json to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-450202 --- packages/gatsby-plugin-page-creator/.snyk | 8 ++++++++ packages/gatsby-plugin-page-creator/package.json | 10 +++++++--- 2 files changed, 15 insertions(+), 3 deletions(-) create mode 100644 packages/gatsby-plugin-page-creator/.snyk diff --git a/packages/gatsby-plugin-page-creator/.snyk b/packages/gatsby-plugin-page-creator/.snyk new file mode 100644 index 0000000000000..10df749084e29 --- /dev/null +++ b/packages/gatsby-plugin-page-creator/.snyk @@ -0,0 +1,8 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.13.5 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-450202: + - lodash: + patched: '2019-07-04T06:30:06.773Z' diff --git a/packages/gatsby-plugin-page-creator/package.json b/packages/gatsby-plugin-page-creator/package.json index b90a6f9e9d495..e068d66d61fbc 100644 --- a/packages/gatsby-plugin-page-creator/package.json +++ b/packages/gatsby-plugin-page-creator/package.json @@ -6,7 +6,9 @@ "scripts": { "build": "babel src --out-dir . --ignore **/__tests__", "watch": "babel -w src --out-dir . --ignore **/__tests__", - "prepare": "cross-env NODE_ENV=production npm run build" + "prepare": "cross-env NODE_ENV=production npm run build", + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" }, "keywords": [ "gatsby", @@ -25,7 +27,8 @@ "glob": "^7.1.1", "lodash": "^4.17.10", "parse-filepath": "^1.0.1", - "slash": "^1.0.0" + "slash": "^1.0.0", + "snyk": "^1.189.0" }, "devDependencies": { "@babel/cli": "^7.0.0", @@ -35,5 +38,6 @@ "peerDependencies": { "gatsby": ">2.0.0-alpha" }, - "gitHead": "5bd5aebe066b9875354a81a4b9ed98722731c465" + "gitHead": "5bd5aebe066b9875354a81a4b9ed98722731c465", + "snyk": true }