From 004e637b947cec8fdf67522b38774a0114b00b54 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 25 Oct 2018 08:25:34 +0000 Subject: [PATCH] fix: .snyk & package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/npm:minimatch:20160620 - https://snyk.io/vuln/npm:tunnel-agent:20170305 The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:minimatch:20160620 - https://snyk.io/vuln/npm:tunnel-agent:20170305 --- .snyk | 15 +++++++++++++++ package.json | 16 ++++++++++------ 2 files changed, 25 insertions(+), 6 deletions(-) create mode 100644 .snyk diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..4bbe152 --- /dev/null +++ b/.snyk @@ -0,0 +1,15 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.12.0 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:minimatch:20160620': + - webdriverio > archiver > file-utils > minimatch: + patched: '2018-10-25T08:25:32.800Z' + - webdriverio > archiver > file-utils > glob > minimatch: + patched: '2018-10-25T08:25:32.800Z' + - webdriverio > archiver > file-utils > findup-sync > glob > minimatch: + patched: '2018-10-25T08:25:32.800Z' + 'npm:tunnel-agent:20170305': + - phantomjs > request > tunnel-agent: + patched: '2018-10-25T08:25:32.800Z' diff --git a/package.json b/package.json index 4b70787..98882aa 100644 --- a/package.json +++ b/package.json @@ -28,20 +28,23 @@ }, "scripts": { "test": "grunt test", - "start": "./bin/webbot" + "start": "./bin/webbot", + "snyk-protect": "snyk protect", + "prepare": "npm run snyk-protect" }, "dependencies": { "async": "0.9.0", "bluebird": "2.4.2", "chai": "1.10.0", - "findup-sync": "0.2.1", + "findup-sync": "0.3.0", "hw-util": ">=1.0.7", - "mocha": "2.0.1", + "mocha": "3.0.0", "phantomjs": "1.9.13", "resolve": "1.0.0", "selenium-standalone": "2.43.1-5", - "webdriverio": "2.4.0", - "yargs": "1.3.3" + "webdriverio": "4.7.0", + "yargs": "1.3.3", + "snyk": "^1.105.0" }, "devDependencies": { "grunt": "0.4.5", @@ -55,5 +58,6 @@ "load-grunt-tasks": "1.0.0", "time-grunt": "1.0.0", "xunit-file": "0.0.5" - } + }, + "snyk": true }