From e06d4e386fe32b0cd763c53f29e0313933355879 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 9 May 2020 03:33:22 +0300 Subject: [PATCH 1/3] fix: package.json, package-lock.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- package.json | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/package.json b/package.json index df75180..0a58a09 100644 --- a/package.json +++ b/package.json @@ -17,7 +17,9 @@ "lint:hbs": "./node_modules/.bin/ember-template-lint app/templates/", "lint:scss": "stylelint app/styles", "start": "ember serve", - "test": "npm run lint && ember test" + "test": "npm run lint && ember test", + "snyk-protect": "snyk protect", + "prepare": "npm run snyk-protect" }, "dependencies": { "@ember/jquery": "^1.0.0", @@ -67,9 +69,11 @@ "sass": "^1.20.1", "stylelint": "^13.1.0", "stylelint-config-recommended": "^3.0.0", - "stylelint-scss": "^3.3.0" + "stylelint-scss": "^3.3.0", + "snyk": "^1.319.2" }, "engines": { "node": ">= 10.*" - } + }, + "snyk": true } From 43c647c7111b71a44373caa4360ca15d2e9833a2 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 9 May 2020 03:33:24 +0300 Subject: [PATCH 2/3] fix: package.json, package-lock.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 From 6bd5db60eb1759001ba04bbe88c44a9eec8f321f Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 9 May 2020 03:33:25 +0300 Subject: [PATCH 3/3] fix: package.json, package-lock.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- .snyk | 14 ++++++++++++++ 1 file changed, 14 insertions(+) create mode 100644 .snyk diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..546d74f --- /dev/null +++ b/.snyk @@ -0,0 +1,14 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.14.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - ember-cli > portfinder > async > lodash: + patched: '2020-05-09T00:32:46.286Z' + - ember-cli > broccoli > console-ui > inquirer > lodash: + patched: '2020-05-09T00:32:46.286Z' + - ember-cli > @babel/plugin-transform-modules-amd > @babel/helper-module-transforms > @babel/helper-replace-supers > @babel/traverse > @babel/helper-function-name > @babel/template > @babel/types > lodash: + patched: '2020-05-09T00:32:46.286Z' + - ember-cli > broccoli-babel-transpiler > @babel/core > @babel/helper-module-transforms > @babel/helper-replace-supers > @babel/traverse > @babel/helper-function-name > @babel/template > @babel/types > lodash: + patched: '2020-05-09T00:32:46.286Z'