diff --git a/.snyk b/.snyk new file mode 100644 index 0000000000..8c28f44d1f --- /dev/null +++ b/.snyk @@ -0,0 +1,52 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.25.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - tap > nyc > istanbul-lib-instrument > babel-types > lodash: + patched: '2024-03-29T16:31:43.173Z' + id: SNYK-JS-LODASH-567746 + path: tap > nyc > istanbul-lib-instrument > babel-types > lodash + - tap > nyc > istanbul-lib-instrument > babel-generator > lodash: + patched: '2024-03-29T16:31:43.173Z' + id: SNYK-JS-LODASH-567746 + path: tap > nyc > istanbul-lib-instrument > babel-generator > lodash + - tap > nyc > istanbul-lib-instrument > babel-traverse > lodash: + patched: '2024-03-29T16:31:43.173Z' + id: SNYK-JS-LODASH-567746 + path: tap > nyc > istanbul-lib-instrument > babel-traverse > lodash + - tap > nyc > istanbul-lib-instrument > babel-template > lodash: + patched: '2024-03-29T16:31:43.173Z' + id: SNYK-JS-LODASH-567746 + path: tap > nyc > istanbul-lib-instrument > babel-template > lodash + - tap > nyc > istanbul-lib-instrument > babel-generator > babel-types > lodash: + patched: '2024-03-29T16:31:43.173Z' + id: SNYK-JS-LODASH-567746 + path: >- + tap > nyc > istanbul-lib-instrument > babel-generator > babel-types > + lodash + - tap > nyc > istanbul-lib-instrument > babel-traverse > babel-types > lodash: + patched: '2024-03-29T16:31:43.173Z' + id: SNYK-JS-LODASH-567746 + path: >- + tap > nyc > istanbul-lib-instrument > babel-traverse > babel-types > + lodash + - tap > nyc > istanbul-lib-instrument > babel-template > babel-types > lodash: + patched: '2024-03-29T16:31:43.173Z' + id: SNYK-JS-LODASH-567746 + path: >- + tap > nyc > istanbul-lib-instrument > babel-template > babel-types > + lodash + - tap > nyc > istanbul-lib-instrument > babel-template > babel-traverse > lodash: + patched: '2024-03-29T16:31:43.173Z' + id: SNYK-JS-LODASH-567746 + path: >- + tap > nyc > istanbul-lib-instrument > babel-template > babel-traverse + > lodash + - tap > nyc > istanbul-lib-instrument > babel-template > babel-traverse > babel-types > lodash: + patched: '2024-03-29T16:31:43.173Z' + id: SNYK-JS-LODASH-567746 + path: >- + tap > nyc > istanbul-lib-instrument > babel-template > babel-traverse + > babel-types > lodash diff --git a/package.json b/package.json index 755181715a..02c55a51fe 100644 --- a/package.json +++ b/package.json @@ -12,46 +12,50 @@ "start": "NODE_OPTIONS=--openssl-legacy-provider node app.js", "build": "browserify -r jquery > public/js/bundle.js", "cleanup": "mongo express-todo --eval 'db.todos.remove({});'", - "test": "snyk test" + "test": "snyk test", + "prepare": "npm run snyk-protect", + "snyk-protect": "snyk-protect" }, "dependencies": { - "adm-zip": "0.4.11", - "body-parser": "1.9.0", - "cfenv": "^1.0.4", + "adm-zip": "0.5.2", + "body-parser": "1.19.2", + "cfenv": "^1.2.4", "consolidate": "0.14.5", "dustjs-helpers": "1.5.0", - "dustjs-linkedin": "2.5.0", - "ejs": "1.0.0", + "dustjs-linkedin": "3.0.0", + "ejs": "3.1.7", "ejs-locals": "1.0.2", - "errorhandler": "1.2.0", - "express": "4.12.4", - "express-fileupload": "0.0.5", + "errorhandler": "1.4.3", + "express": "4.19.2", + "express-fileupload": "1.1.10", "express-session": "^1.17.2", "file-type": "^8.1.0", - "hbs": "^4.0.4", - "humanize-ms": "1.0.1", - "jquery": "^2.2.4", - "lodash": "4.17.4", - "marked": "0.3.5", + "hbs": "^4.1.2", + "humanize-ms": "1.2.1", + "jquery": "^3.5.0", + "lodash": "4.17.21", + "marked": "4.0.10", "method-override": "latest", - "moment": "2.15.1", + "moment": "2.29.2", "mongodb": "^3.5.9", - "mongoose": "4.2.4", + "mongoose": "5.13.20", "morgan": "latest", - "ms": "^0.7.1", + "ms": "^2.0.0", "mysql": "^2.18.1", - "npmconf": "0.0.24", + "npmconf": "2.1.3", "optional": "^0.1.3", - "st": "0.2.4", + "st": "1.2.2", "stream-buffers": "^3.0.1", - "tap": "^11.1.3", - "typeorm": "^0.2.24", - "validator": "^13.5.2" + "tap": "^18.0.0", + "typeorm": "^0.3.18", + "validator": "^13.7.0", + "@snyk/protect": "latest" }, "devDependencies": { "browserify": "^13.1.1", "nodemon": "^2.0.7", - "snyk": "^1.244.0" + "snyk": "^1.1286.2" }, - "license": "Apache-2.0" + "license": "Apache-2.0", + "snyk": true }