Skip to content

Commit 1a672f4

Browse files
committed
fix: package.json, package-lock.json & .snyk to reduce vulnerabilities
The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746
1 parent e10ee60 commit 1a672f4

File tree

2 files changed

+28
-3
lines changed

2 files changed

+28
-3
lines changed

.snyk

+22
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
2+
version: v1.14.1
3+
ignore: {}
4+
# patches apply the minimum changes required to fix a vulnerability
5+
patch:
6+
SNYK-JS-LODASH-567746:
7+
- stylelint > @stylelint/postcss-css-in-js > @babel/core > lodash:
8+
patched: '2020-05-30T00:50:32.962Z'
9+
- stylelint > @stylelint/postcss-css-in-js > @babel/core > @babel/helper-module-transforms > lodash:
10+
patched: '2020-05-30T00:50:32.962Z'
11+
- eslint-config-stylelint > eslint-plugin-jest > @typescript-eslint/experimental-utils > @typescript-eslint/typescript-estree > lodash:
12+
patched: '2020-05-30T00:50:32.962Z'
13+
- stylelint > @stylelint/postcss-css-in-js > @babel/core > @babel/helpers > @babel/traverse > lodash:
14+
patched: '2020-05-30T00:50:32.962Z'
15+
- stylelint > @stylelint/postcss-css-in-js > @babel/core > @babel/helper-module-transforms > @babel/helper-replace-supers > @babel/traverse > lodash:
16+
patched: '2020-05-30T00:50:32.962Z'
17+
- stylelint > @stylelint/postcss-css-in-js > @babel/core > @babel/helper-module-transforms > @babel/helper-replace-supers > @babel/traverse > @babel/generator > lodash:
18+
patched: '2020-05-30T00:50:32.962Z'
19+
- stylelint > @stylelint/postcss-css-in-js > @babel/core > @babel/helper-module-transforms > @babel/helper-replace-supers > @babel/traverse > @babel/helper-split-export-declaration > @babel/types > lodash:
20+
patched: '2020-05-30T00:50:32.962Z'
21+
- stylelint > @stylelint/postcss-css-in-js > @babel/core > @babel/helper-module-transforms > @babel/helper-replace-supers > @babel/traverse > @babel/helper-function-name > @babel/template > @babel/types > lodash:
22+
patched: '2020-05-30T00:50:32.962Z'

package.json

+6-3
Original file line numberDiff line numberDiff line change
@@ -43,7 +43,9 @@
4343
"task-webpack-app": "cross-env NODE_ENV=production node node_modules/gulp/bin/gulp webpack:app --serverConfig=/env/config/hapi/config --gulpTaskConfig=/env/config/",
4444
"task-svgo": "cross-env NODE_ENV=build node node_modules/gulp/bin/gulp svgo --serverConfig=/env/config/hapi/config --gulpTaskConfig=/env/config/",
4545
"task-svg-symbols": "cross-env NODE_ENV=build node node_modules/gulp/bin/gulp svg-symbols --serverConfig=/env/config/hapi/config --gulpTaskConfig=/env/config/",
46-
"deploy-now": "npm run build && now ./build -A ../now.json"
46+
"deploy-now": "npm run build && now ./build -A ../now.json",
47+
"snyk-protect": "snyk protect",
48+
"prepare": "npm run snyk-protect"
4749
},
4850
"dependencies": {
4951
"acorn": "7.2.0",
@@ -101,7 +103,7 @@
101103
"regenerator-runtime": "0.13.5",
102104
"requestidlecallback": "^0.3.0",
103105
"script-loader": "0.7.2",
104-
"snyk": "1.332.1",
106+
"snyk": "^1.332.1",
105107
"string-replace-loader": "2.3.0",
106108
"template-helpers": "1.0.1",
107109
"uglifyjs-webpack-plugin": "2.2.0",
@@ -142,5 +144,6 @@
142144
"webpack-dev-middleware": "3.7.2",
143145
"webpack-hot-middleware": "2.25.0",
144146
"webpack-pwa-manifest": "4.2.0"
145-
}
147+
},
148+
"snyk": true
146149
}

0 commit comments

Comments
 (0)