diff --git a/.snyk b/.snyk index ee210b0..935c0a3 100644 --- a/.snyk +++ b/.snyk @@ -6,6 +6,9 @@ ignore: - nunjucks > chokidar > fsevents > node-pre-gyp > tar-pack > debug: reason: No patch available expires: '2017-10-27T13:48:28.130Z' + brunch > chokidar > fsevents > node-pre-gyp > tar-pack > debug: + reason: No patch available + expires: '2017-11-08T15:34:13.724Z' - helmet > connect > debug: reason: No patch available expires: '2017-10-27T13:48:28.130Z' @@ -19,6 +22,9 @@ ignore: - nunjucks > chokidar > fsevents > node-pre-gyp > request > tough-cookie: reason: No patch available expires: '2017-10-27T13:48:28.130Z' + brunch > chokidar > fsevents > node-pre-gyp > request > tough-cookie: + reason: No patch available + expires: '2017-11-08T15:34:13.725Z' - node-pre-gyp > request > tough-cookie: reason: No patch available expires: '2017-10-27T14:11:07.304Z' @@ -26,7 +32,31 @@ ignore: - express > send > mime: reason: No patch available expires: '2017-10-27T14:11:07.304Z' + brunch > serve-brunch > pushserve > express > send > mime: + reason: No patch available + expires: '2017-11-08T15:34:13.724Z' - express > serve-static > send > mime: reason: No patch available expires: '2017-10-27T14:11:07.304Z' -patch: {} + brunch > serve-brunch > pushserve > express > serve-static > send > mime: + reason: No patch available + expires: '2017-11-08T15:34:13.725Z' + - brunch > serve-brunch > pushserve > serve-static > send > mime: + reason: No patch available + expires: '2017-11-08T15:34:13.725Z' + 'npm:growl:20160721': + - brunch > deppack > loggy > growl: + reason: No upgrade or patch available. + expires: '2017-11-08T15:19:44.317Z' +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:debug:20170905': + - brunch > since-app-start > debug: + patched: '2017-10-09T15:33:33.420Z' + - brunch > debug: + patched: '2017-10-09T15:33:33.420Z' + 'npm:ms:20170412': + - brunch > since-app-start > debug > ms: + patched: '2017-10-09T15:33:33.420Z' + - brunch > debug > ms: + patched: '2017-10-09T15:33:33.420Z' diff --git a/package.json b/package.json index c6340b5..f487ada 100644 --- a/package.json +++ b/package.json @@ -36,7 +36,7 @@ "dependencies": { "after-brunch": "^0.0.5", "body-parser": "^1.18.2", - "brunch": "^2.10.10", + "brunch": "2.10.10", "compression": "^1.7.1", "cookie-parser": "^1.4.3", "crypto-js": "^3.1.9-1", @@ -75,4 +75,4 @@ "mocha": "^4.0.0", "nodemon": "^1.12.0" } -} +} \ No newline at end of file diff --git a/yarn.lock b/yarn.lock index c344e0b..b1dcc82 100644 --- a/yarn.lock +++ b/yarn.lock @@ -535,7 +535,7 @@ brunch-skeletons@~0.1.4: version "0.1.6" resolved "https://registry.yarnpkg.com/brunch-skeletons/-/brunch-skeletons-0.1.6.tgz#f15102a1b6babc964ce3d7e3c141dc0daa9d28ac" -brunch@^2.10.10: +brunch@2.10.10: version "2.10.10" resolved "https://registry.yarnpkg.com/brunch/-/brunch-2.10.10.tgz#89d14bfbd7ca0c2e326167c2625ce1d4c937d4f8" dependencies: @@ -3321,14 +3321,10 @@ mime-types@^2.1.10, mime-types@^2.1.12, mime-types@~2.1.15, mime-types@~2.1.16, dependencies: mime-db "~1.30.0" -mime@1.3.4: +mime@1.3.4, mime@^1.3.4: version "1.3.4" resolved "https://registry.yarnpkg.com/mime/-/mime-1.3.4.tgz#115f9e3b6b3daf2959983cb38f149a2d40eb5d53" -mime@^1.3.4: - version "1.4.1" - resolved "https://registry.yarnpkg.com/mime/-/mime-1.4.1.tgz#121f9ebc49e3766f311a76e1fa1c8003c4b03aa6" - mimic-fn@^1.0.0: version "1.1.0" resolved "https://registry.yarnpkg.com/mimic-fn/-/mimic-fn-1.1.0.tgz#e667783d92e89dbd342818b5230b9d62a672ad18" @@ -5380,7 +5376,7 @@ window-size@^0.2.0: version "0.2.0" resolved "https://registry.yarnpkg.com/window-size/-/window-size-0.2.0.tgz#b4315bb4214a3d7058ebeee892e13fa24d98b075" -wordwrap@0.0.2: +wordwrap@0.0.2, wordwrap@~0.0.2: version "0.0.2" resolved "https://registry.yarnpkg.com/wordwrap/-/wordwrap-0.0.2.tgz#b79669bb42ecb409f83d583cad52ca17eaa1643f" @@ -5388,10 +5384,6 @@ wordwrap@^1.0.0, wordwrap@~1.0.0: version "1.0.0" resolved "https://registry.yarnpkg.com/wordwrap/-/wordwrap-1.0.0.tgz#27584810891456a4171c8d0226441ade90cbcaeb" -wordwrap@~0.0.2: - version "0.0.3" - resolved "https://registry.yarnpkg.com/wordwrap/-/wordwrap-0.0.3.tgz#a3d5da6cd5c0bc0008d37234bbaf1bed63059107" - wrap-ansi@^2.0.0: version "2.1.0" resolved "https://registry.yarnpkg.com/wrap-ansi/-/wrap-ansi-2.1.0.tgz#d8fc3d284dd05794fe84973caecdd1cf824fdd85"