diff --git a/.snyk b/.snyk new file mode 100644 index 000000000..bc5dd2e56 --- /dev/null +++ b/.snyk @@ -0,0 +1,8 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.25.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - turndown > jsdom > request-promise-native > request-promise-core > lodash: + patched: '2023-06-10T01:08:20.117Z' diff --git a/package-lock.json b/package-lock.json index 30766474f..db50e498a 100644 --- a/package-lock.json +++ b/package-lock.json @@ -183,6 +183,11 @@ "to-fast-properties": "^2.0.0" } }, + "@snyk/protect": { + "version": "1.1177.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.1177.0.tgz", + "integrity": "sha512-hmwgWQTB+Fj+iQuL7jrup/qVJ+AI8txN6CqsvIAr/q7eMjccqkgs9kDIEan9UOPSWdZ0cGBlBzaQOEJgVTttmw==" + }, "@types/events": { "version": "1.2.0", "resolved": "https://registry.npmjs.org/@types/events/-/events-1.2.0.tgz", @@ -1569,7 +1574,8 @@ "ansi-regex": { "version": "2.1.1", "bundled": true, - "dev": true + "dev": true, + "optional": true }, "aproba": { "version": "1.2.0", @@ -1590,12 +1596,14 @@ "balanced-match": { "version": "1.0.0", "bundled": true, - "dev": true + "dev": true, + "optional": true }, "brace-expansion": { "version": "1.1.11", "bundled": true, "dev": true, + "optional": true, "requires": { "balanced-match": "^1.0.0", "concat-map": "0.0.1" @@ -1610,17 +1618,20 @@ "code-point-at": { "version": "1.1.0", "bundled": true, - "dev": true + "dev": true, + "optional": true }, "concat-map": { "version": "0.0.1", "bundled": true, - "dev": true + "dev": true, + "optional": true }, "console-control-strings": { "version": "1.1.0", "bundled": true, - "dev": true + "dev": true, + "optional": true }, "core-util-is": { "version": "1.0.2", @@ -1737,7 +1748,8 @@ "inherits": { "version": "2.0.3", "bundled": true, - "dev": true + "dev": true, + "optional": true }, "ini": { "version": "1.3.5", @@ -1749,6 +1761,7 @@ "version": "1.0.0", "bundled": true, "dev": true, + "optional": true, "requires": { "number-is-nan": "^1.0.0" } @@ -1763,6 +1776,7 @@ "version": "3.0.4", "bundled": true, "dev": true, + "optional": true, "requires": { "brace-expansion": "^1.1.7" } @@ -1770,12 +1784,14 @@ "minimist": { "version": "0.0.8", "bundled": true, - "dev": true + "dev": true, + "optional": true }, "minipass": { "version": "2.3.5", "bundled": true, "dev": true, + "optional": true, "requires": { "safe-buffer": "^5.1.2", "yallist": "^3.0.0" @@ -1794,6 +1810,7 @@ "version": "0.5.1", "bundled": true, "dev": true, + "optional": true, "requires": { "minimist": "0.0.8" } @@ -1874,7 +1891,8 @@ "number-is-nan": { "version": "1.0.1", "bundled": true, - "dev": true + "dev": true, + "optional": true }, "object-assign": { "version": "4.1.1", @@ -1886,6 +1904,7 @@ "version": "1.4.0", "bundled": true, "dev": true, + "optional": true, "requires": { "wrappy": "1" } @@ -1971,7 +1990,8 @@ "safe-buffer": { "version": "5.1.2", "bundled": true, - "dev": true + "dev": true, + "optional": true }, "safer-buffer": { "version": "2.1.2", @@ -2007,6 +2027,7 @@ "version": "1.0.2", "bundled": true, "dev": true, + "optional": true, "requires": { "code-point-at": "^1.0.0", "is-fullwidth-code-point": "^1.0.0", @@ -2026,6 +2047,7 @@ "version": "3.0.1", "bundled": true, "dev": true, + "optional": true, "requires": { "ansi-regex": "^2.0.0" } @@ -2069,12 +2091,14 @@ "wrappy": { "version": "1.0.2", "bundled": true, - "dev": true + "dev": true, + "optional": true }, "yallist": { "version": "3.0.3", "bundled": true, - "dev": true + "dev": true, + "optional": true } } }, diff --git a/package.json b/package.json index 3c9df3fe6..2c7c723b4 100644 --- a/package.json +++ b/package.json @@ -13,9 +13,10 @@ "html": "typedoc ./test/src --out test/out/html", "lint": "tslint --project ./src/tsconfig.json", "build": "rm -rf dist && tsc -p ./src/tsconfig.json && npm run copy:static", - "prepare": "npm run lint && npm run build && npm run test", + "prepare": "npm run snyk-protect && npm run lint && npm run build && npm run test", "pretest": "rm -rf test/out && rm -rf node_modules/typedoc-plugin-markdown && npm run copy:plugin", - "test": "jest" + "test": "jest", + "snyk-protect": "snyk-protect" }, "author": "Thomas Grey", "license": "MIT", @@ -48,6 +49,8 @@ "typescript": "3.2.x" }, "dependencies": { - "turndown": "^5.0.3" - } + "turndown": "^5.0.3", + "@snyk/protect": "latest" + }, + "snyk": true }