From 974117f06db895da5823c8f0beb3e7a5de440901 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 29 Jun 2018 06:50:24 +0000 Subject: [PATCH] fix: .snyk & package.json to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:tunnel-agent:20170305 --- .snyk | 8 ++++++++ package.json | 10 +++++++--- 2 files changed, 15 insertions(+), 3 deletions(-) create mode 100644 .snyk diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..64af327 --- /dev/null +++ b/.snyk @@ -0,0 +1,8 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.12.0 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:tunnel-agent:20170305': + - node-sass > request > tunnel-agent: + patched: '2018-06-29T06:50:22.419Z' diff --git a/package.json b/package.json index 853655d..8ef4097 100644 --- a/package.json +++ b/package.json @@ -8,7 +8,9 @@ "start": "webpack-dev-server --progress --profile --colors", "lint": "eslint --ext js --ext jsx src || exit 0", "dev": " webpack-dashboard -- webpack-dev-server --progress --profile --colors", - "test": "find ./src/tests -name '*_test.js' | xargs mocha -R spec --require babel-register param" + "test": "find ./src/tests -name '*_test.js' | xargs mocha -R spec --require babel-register param", + "snyk-protect": "snyk protect", + "prepare": "npm run snyk-protect" }, "repository": { "type": "git", @@ -30,7 +32,8 @@ "react-loading": "^0.1.4", "react-search-input": "^0.11.2", "react-select": "^1.0.0-rc.3", - "sass-loader": "^6.0.2" + "sass-loader": "^6.0.2", + "snyk": "^1.87.0" }, "devDependencies": { "babel-core": "^6.23.1", @@ -62,5 +65,6 @@ "webpack-cleanup-plugin": "^0.4.2", "webpack-dashboard": "^0.3.0", "webpack-dev-server": "^2.4.1" - } + }, + "snyk": true }