Skip to content

Commit

Permalink
fix: .snyk & package.json to reduce vulnerabilities
Browse files Browse the repository at this point in the history
The following vulnerabilities are fixed with a Snyk patch:
- https://snyk.io/vuln/SNYK-JS-LODASH-450202
  • Loading branch information
snyk-test committed Jul 4, 2019
1 parent 8fbda07 commit f9bfaae
Show file tree
Hide file tree
Showing 2 changed files with 25 additions and 3 deletions.
18 changes: 18 additions & 0 deletions .snyk
Original file line number Diff line number Diff line change
@@ -0,0 +1,18 @@
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
version: v1.13.5
ignore: {}
# patches apply the minimum changes required to fix a vulnerability
patch:
SNYK-JS-LODASH-450202:
- lodash:
patched: '2019-07-04T08:49:30.086Z'
- yeoman-generator > lodash:
patched: '2019-07-04T08:49:30.086Z'
- yeoman-generator > async > lodash:
patched: '2019-07-04T08:49:30.086Z'
- yeoman-generator > yeoman-environment > lodash:
patched: '2019-07-04T08:49:30.086Z'
- yeoman-generator > yeoman-environment > grouped-queue > lodash:
patched: '2019-07-04T08:49:30.086Z'
- yeoman-generator > yeoman-environment > inquirer > lodash:
patched: '2019-07-04T08:49:30.086Z'
10 changes: 7 additions & 3 deletions package.json
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,9 @@
"scripts": {
"test": "istanbul cover _mocha -- --recursive test",
"eslint": "node_modules/.bin/eslint generators/ test/",
"cobertura": "istanbul report cobertura --root coverage"
"cobertura": "istanbul report cobertura --root coverage",
"snyk-protect": "snyk protect",
"prepublish": "npm run snyk-protect"
},
"author": {
"name": "Rain Agency",
Expand All @@ -24,7 +26,8 @@
"lodash": "^4.17.4",
"path": "^0.12.7",
"simple-mock": "^0.7.3",
"yeoman-generator": "^1.0.0"
"yeoman-generator": "^1.0.0",
"snyk": "^1.190.0"
},
"devDependencies": {
"chai": "^3.5.0",
Expand All @@ -46,5 +49,6 @@
"yeoman-test": "^1.6.0"
},
"repository": "mediarain/generator-voxa-skill",
"license": "MIT"
"license": "MIT",
"snyk": true
}

0 comments on commit f9bfaae

Please sign in to comment.