diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..63fbd6e --- /dev/null +++ b/.snyk @@ -0,0 +1,44 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.13.5 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-450202: + - babel-plugin-transform-async-to-module-method > babel-helper-remap-async-to-generator > babel-traverse > babel-types > lodash: + patched: '2019-07-03T21:46:41.355Z' + - lodash: + patched: '2019-07-03T21:46:41.355Z' + - mongoose > async > lodash: + patched: '2019-07-03T21:46:41.355Z' + - babel-plugin-transform-async-to-module-method > babel-types > lodash: + patched: '2019-07-03T21:46:41.355Z' + - babel-plugin-transform-async-to-module-method > babel-helper-remap-async-to-generator > babel-types > lodash: + patched: '2019-07-03T21:46:41.355Z' + - babel-plugin-transform-async-to-module-method > babel-helper-remap-async-to-generator > babel-traverse > lodash: + patched: '2019-07-03T21:46:41.355Z' + - babel-plugin-transform-async-to-module-method > babel-helper-remap-async-to-generator > babel-template > lodash: + patched: '2019-07-03T21:46:41.355Z' + - babel-plugin-transform-async-to-module-method > babel-helper-remap-async-to-generator > babel-template > babel-types > lodash: + patched: '2019-07-03T21:46:41.355Z' + - babel-plugin-transform-async-to-module-method > babel-helper-remap-async-to-generator > babel-helper-function-name > babel-types > lodash: + patched: '2019-07-03T21:46:41.355Z' + - request-promise > request-promise-core > lodash: + patched: '2019-07-03T21:46:41.355Z' + - babel-plugin-transform-async-to-module-method > babel-helper-remap-async-to-generator > babel-template > babel-traverse > lodash: + patched: '2019-07-03T21:46:41.355Z' + - babel-plugin-transform-async-to-module-method > babel-helper-remap-async-to-generator > babel-helper-function-name > babel-traverse > lodash: + patched: '2019-07-03T21:46:41.355Z' + - babel-plugin-transform-async-to-module-method > babel-helper-remap-async-to-generator > babel-helper-function-name > babel-template > lodash: + patched: '2019-07-03T21:46:41.355Z' + - babel-plugin-transform-async-to-module-method > babel-helper-remap-async-to-generator > babel-helper-function-name > babel-helper-get-function-arity > babel-types > lodash: + patched: '2019-07-03T21:46:41.355Z' + - babel-plugin-transform-async-to-module-method > babel-helper-remap-async-to-generator > babel-template > babel-traverse > babel-types > lodash: + patched: '2019-07-03T21:46:41.355Z' + - babel-plugin-transform-async-to-module-method > babel-helper-remap-async-to-generator > babel-helper-function-name > babel-traverse > babel-types > lodash: + patched: '2019-07-03T21:46:41.355Z' + - babel-plugin-transform-async-to-module-method > babel-helper-remap-async-to-generator > babel-helper-function-name > babel-template > babel-types > lodash: + patched: '2019-07-03T21:46:41.355Z' + - babel-plugin-transform-async-to-module-method > babel-helper-remap-async-to-generator > babel-helper-function-name > babel-template > babel-traverse > lodash: + patched: '2019-07-03T21:46:41.355Z' + - babel-plugin-transform-async-to-module-method > babel-helper-remap-async-to-generator > babel-helper-function-name > babel-template > babel-traverse > babel-types > lodash: + patched: '2019-07-03T21:46:41.355Z' diff --git a/package.json b/package.json index 0de981c..658f19d 100644 --- a/package.json +++ b/package.json @@ -3,7 +3,9 @@ "version": "0.0.0", "private": true, "scripts": { - "start": "node ./bin/www" + "start": "node ./bin/www", + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" }, "dependencies": { "babel-plugin-transform-async-to-module-method": "^6.22.0", @@ -26,7 +28,8 @@ "request": "^2.79.0", "request-promise": "^4.1.1", "serve-favicon": "~2.3.0", - "uuid": "^3.0.1" + "uuid": "^3.0.1", + "snyk": "^1.189.0" }, "devDependencies": { "babel-cli": "^6.18.0", @@ -35,5 +38,6 @@ "babel-preset-stage-2": "^6.18.0", "babel-register": "^6.18.0", "karma": "^1.3.0" - } + }, + "snyk": true }