Skip to content

Commit 4caac22

Browse files
author
snyk-test
committed
fix: .snyk & package.json to reduce vulnerabilities
The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-450202
1 parent fa8af34 commit 4caac22

File tree

2 files changed

+15
-3
lines changed

2 files changed

+15
-3
lines changed

.snyk

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
2+
version: v1.13.5
3+
ignore: {}
4+
# patches apply the minimum changes required to fix a vulnerability
5+
patch:
6+
SNYK-JS-LODASH-450202:
7+
- lodash:
8+
patched: '2019-07-04T05:32:34.833Z'

package.json

Lines changed: 7 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,9 @@
2323
"scripts": {
2424
"test": "mocha",
2525
"test:cov": "nyc --reporter=text-lcov yarn test | coveralls",
26-
"semantic-release": "semantic-release"
26+
"semantic-release": "semantic-release",
27+
"snyk-protect": "snyk protect",
28+
"prepublish": "npm run snyk-protect"
2729
},
2830
"husky": {
2931
"hooks": {
@@ -34,7 +36,8 @@
3436
"dependencies": {
3537
"create-html-element": "^3.0.0",
3638
"loader-utils": "^1.2.3",
37-
"lodash": "^4.17.11"
39+
"lodash": "^4.17.11",
40+
"snyk": "^1.189.0"
3841
},
3942
"devDependencies": {
4043
"@commitlint/cli": "^8.0.0",
@@ -46,5 +49,6 @@
4649
"mocha": "^6.1.4",
4750
"nyc": "^14.1.1",
4851
"semantic-release": "^15.13.12"
49-
}
52+
},
53+
"snyk": true
5054
}

0 commit comments

Comments
 (0)