diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..d2690c4 --- /dev/null +++ b/.snyk @@ -0,0 +1,13 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.12.0 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:mime:20170907': + - phantomjs > request > form-data > mime: + patched: '2018-06-28T07:53:37.703Z' + - webdriverio > request > mime: + patched: '2018-06-28T07:53:37.703Z' + 'npm:tunnel-agent:20170305': + - phantomjs > request > tunnel-agent: + patched: '2018-06-28T07:53:37.703Z' diff --git a/package.json b/package.json index 4b70787..5dd5229 100644 --- a/package.json +++ b/package.json @@ -28,7 +28,9 @@ }, "scripts": { "test": "grunt test", - "start": "./bin/webbot" + "start": "./bin/webbot", + "snyk-protect": "snyk protect", + "prepare": "npm run snyk-protect" }, "dependencies": { "async": "0.9.0", @@ -40,8 +42,9 @@ "phantomjs": "1.9.13", "resolve": "1.0.0", "selenium-standalone": "2.43.1-5", - "webdriverio": "2.4.0", - "yargs": "1.3.3" + "webdriverio": "3.0.0", + "yargs": "1.3.3", + "snyk": "^1.85.0" }, "devDependencies": { "grunt": "0.4.5", @@ -55,5 +58,6 @@ "load-grunt-tasks": "1.0.0", "time-grunt": "1.0.0", "xunit-file": "0.0.5" - } + }, + "snyk": true }