From 224078ad7770856b0c54d44db97e4905470bffdb Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 30 Apr 2020 23:14:14 -0700 Subject: [PATCH 1/2] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 9e1d2c4..79ff87b 100644 --- a/package.json +++ b/package.json @@ -31,7 +31,7 @@ "marked-promise": "^2.0.0", "micro": "^7.3.2", "promisepipe": "^2.0.0", - "snyk": "^1.46.0" + "snyk": "^1.316.1" }, "devDependencies": {}, "snyk": true From 5f64aaaa68bfb38f6ed1be567403df63105cdf00 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 30 Apr 2020 23:14:15 -0700 Subject: [PATCH 2/2] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- .snyk | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/.snyk b/.snyk index 1b6ba3b..0242232 100644 --- a/.snyk +++ b/.snyk @@ -1,5 +1,5 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.8.0 +version: v1.14.1 ignore: {} # patches apply the minimum changes required to fix a vulnerability patch: @@ -11,3 +11,6 @@ patch: 'npm:marked:20170907': - marked-promise > marked: patched: '2017-10-27T04:51:06.627Z' + SNYK-JS-LODASH-567746: + - micro > args > string-similarity > lodash: + patched: '2020-05-01T06:13:43.135Z'