From d25739feabd157d5823cf85d7619f17b02c24e06 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 27 Sep 2022 07:31:32 +0000 Subject: [PATCH] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-ACORN-559469 - https://snyk.io/vuln/SNYK-JS-AJV-584908 - https://snyk.io/vuln/SNYK-JS-ANSIREGEX-1583908 - https://snyk.io/vuln/SNYK-JS-ASYNC-2441827 - https://snyk.io/vuln/SNYK-JS-HANDLEBARS-1056767 - https://snyk.io/vuln/SNYK-JS-HANDLEBARS-1279029 - https://snyk.io/vuln/SNYK-JS-HANDLEBARS-173692 - https://snyk.io/vuln/SNYK-JS-HANDLEBARS-174183 - https://snyk.io/vuln/SNYK-JS-HANDLEBARS-469063 - https://snyk.io/vuln/SNYK-JS-HANDLEBARS-480388 - https://snyk.io/vuln/SNYK-JS-HANDLEBARS-534478 - https://snyk.io/vuln/SNYK-JS-HANDLEBARS-534988 - https://snyk.io/vuln/SNYK-JS-HANDLEBARS-567742 - https://snyk.io/vuln/SNYK-JS-HOSTEDGITINFO-1088355 - https://snyk.io/vuln/SNYK-JS-JSONSCHEMA-1920922 - https://snyk.io/vuln/SNYK-JS-JSYAML-173999 - https://snyk.io/vuln/SNYK-JS-JSYAML-174129 - https://snyk.io/vuln/SNYK-JS-KINDOF-537849 - https://snyk.io/vuln/SNYK-JS-LODASH-1018905 - https://snyk.io/vuln/SNYK-JS-LODASH-1040724 - https://snyk.io/vuln/SNYK-JS-LODASH-450202 - https://snyk.io/vuln/SNYK-JS-LODASH-567746 - https://snyk.io/vuln/SNYK-JS-LODASH-608086 - https://snyk.io/vuln/SNYK-JS-MERGE-1040469 - https://snyk.io/vuln/SNYK-JS-MERGE-1042987 - https://snyk.io/vuln/SNYK-JS-MERGE-72553 - https://snyk.io/vuln/SNYK-JS-MINIMIST-2429795 - https://snyk.io/vuln/SNYK-JS-MINIMIST-559764 - https://snyk.io/vuln/SNYK-JS-MIXINDEEP-450212 - https://snyk.io/vuln/SNYK-JS-NODEFETCH-2342118 - https://snyk.io/vuln/SNYK-JS-NODEFETCH-674311 - https://snyk.io/vuln/SNYK-JS-NODENOTIFIER-1035794 - https://snyk.io/vuln/SNYK-JS-NWSAPI-2841516 - https://snyk.io/vuln/SNYK-JS-PATHPARSE-1077067 - https://snyk.io/vuln/SNYK-JS-PLIST-2405644 - https://snyk.io/vuln/SNYK-JS-PROMPTS-1729737 - https://snyk.io/vuln/SNYK-JS-SETVALUE-1540541 - https://snyk.io/vuln/SNYK-JS-SETVALUE-450213 - https://snyk.io/vuln/SNYK-JS-SHELLQUOTE-1766506 - https://snyk.io/vuln/SNYK-JS-TMPL-1583443 - https://snyk.io/vuln/SNYK-JS-WS-1296835 - https://snyk.io/vuln/SNYK-JS-XMLDOM-1084960 - https://snyk.io/vuln/SNYK-JS-Y18N-1021887 - https://snyk.io/vuln/SNYK-JS-YARGSPARSER-560381 - https://snyk.io/vuln/npm:braces:20180219 - https://snyk.io/vuln/npm:mem:20180117 - https://snyk.io/vuln/npm:plist:20180219 The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- .snyk | 220 +++++++++++++++++++++++++++++++++++++++++++++++++++ package.json | 48 +++++------ 2 files changed, 246 insertions(+), 22 deletions(-) create mode 100644 .snyk diff --git a/.snyk b/.snyk new file mode 100644 index 00000000000000..54afede0088079 --- /dev/null +++ b/.snyk @@ -0,0 +1,220 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.25.0 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - inquirer > lodash: + patched: '2022-09-27T07:31:26.561Z' + - metro > @babel/core > lodash: + patched: '2022-09-27T07:31:26.561Z' + - fbjs-scripts > @babel/core > lodash: + patched: '2022-09-27T07:31:26.561Z' + - metro-babel-register > @babel/register > lodash: + patched: '2022-09-27T07:31:26.561Z' + - metro > async > lodash: + patched: '2022-09-27T07:31:26.561Z' + - metro > @babel/core > @babel/traverse > lodash: + patched: '2022-09-27T07:31:26.561Z' + - fbjs-scripts > @babel/core > @babel/traverse > lodash: + patched: '2022-09-27T07:31:26.561Z' + - metro-babel-register > @babel/plugin-transform-modules-commonjs > @babel/helper-module-transforms > lodash: + patched: '2022-09-27T07:31:26.561Z' + - fbjs-scripts > babel-preset-fbjs > @babel/plugin-transform-block-scoping > lodash: + patched: '2022-09-27T07:31:26.561Z' + - metro > babel-preset-fbjs > @babel/plugin-transform-block-scoping > lodash: + patched: '2022-09-27T07:31:26.561Z' + - metro > metro-react-native-babel-preset > @babel/plugin-transform-block-scoping > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest-junit > jest-config > babel-core > lodash: + patched: '2022-09-27T07:31:26.561Z' + - metro > react-transform-hmr > react-proxy > lodash: + patched: '2022-09-27T07:31:26.561Z' + - metro > @babel/core > @babel/helpers > @babel/traverse > lodash: + patched: '2022-09-27T07:31:26.561Z' + - fbjs-scripts > @babel/core > @babel/helpers > @babel/traverse > lodash: + patched: '2022-09-27T07:31:26.561Z' + - metro-babel-register > @babel/plugin-transform-async-to-generator > @babel/helper-remap-async-to-generator > @babel/traverse > lodash: + patched: '2022-09-27T07:31:26.561Z' + - metro > metro-react-native-babel-preset > @babel/plugin-transform-unicode-regex > @babel/helper-regex > lodash: + patched: '2022-09-27T07:31:26.561Z' + - fbjs-scripts > babel-preset-fbjs > @babel/plugin-transform-modules-commonjs > @babel/helper-module-transforms > lodash: + patched: '2022-09-27T07:31:26.561Z' + - metro > babel-preset-fbjs > @babel/plugin-transform-modules-commonjs > @babel/helper-module-transforms > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest-junit > jest-config > babel-core > babel-types > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest-junit > jest-config > babel-core > babel-generator > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest-junit > jest-config > babel-core > babel-traverse > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest-junit > jest-config > jest-jasmine2 > babel-traverse > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest-junit > jest-config > babel-core > babel-template > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest-junit > jest-config > babel-core > babel-register > lodash: + patched: '2022-09-27T07:31:26.561Z' + - metro > metro-react-native-babel-preset > react-transform-hmr > react-proxy > lodash: + patched: '2022-09-27T07:31:26.561Z' + - fbjs-scripts > @babel/core > @babel/helpers > @babel/traverse > @babel/generator > lodash: + patched: '2022-09-27T07:31:26.561Z' + - metro > @babel/core > @babel/helpers > @babel/traverse > @babel/generator > lodash: + patched: '2022-09-27T07:31:26.561Z' + - metro-babel-register > @babel/plugin-transform-async-to-generator > @babel/helper-remap-async-to-generator > @babel/helper-wrap-function > @babel/traverse > lodash: + patched: '2022-09-27T07:31:26.561Z' + - fbjs-scripts > babel-preset-fbjs > @babel/plugin-transform-parameters > @babel/helper-call-delegate > @babel/traverse > lodash: + patched: '2022-09-27T07:31:26.561Z' + - metro > babel-preset-fbjs > @babel/plugin-transform-parameters > @babel/helper-call-delegate > @babel/traverse > lodash: + patched: '2022-09-27T07:31:26.561Z' + - metro > metro-react-native-babel-preset > @babel/plugin-transform-parameters > @babel/helper-call-delegate > @babel/traverse > lodash: + patched: '2022-09-27T07:31:26.561Z' + - metro > metro-react-native-babel-preset > metro-babel7-plugin-react-transform > @babel/helper-module-imports > @babel/types > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest-junit > jest-config > babel-core > babel-generator > babel-types > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest-junit > jest-config > babel-core > babel-traverse > babel-types > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest-junit > jest-config > jest-jasmine2 > babel-traverse > babel-types > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest-junit > jest-config > babel-core > babel-template > babel-types > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest-junit > jest-config > jest-jasmine2 > jest-snapshot > babel-types > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest-junit > jest-config > babel-core > babel-template > babel-traverse > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest-junit > jest-config > babel-core > babel-helpers > babel-template > lodash: + patched: '2022-09-27T07:31:26.561Z' + - fbjs-scripts > @babel/core > @babel/helpers > @babel/traverse > @babel/helper-split-export-declaration > @babel/types > lodash: + patched: '2022-09-27T07:31:26.561Z' + - metro > @babel/core > @babel/helpers > @babel/traverse > @babel/helper-split-export-declaration > @babel/types > lodash: + patched: '2022-09-27T07:31:26.561Z' + - metro-babel-register > @babel/plugin-transform-async-to-generator > @babel/helper-remap-async-to-generator > @babel/helper-wrap-function > @babel/traverse > @babel/generator > lodash: + patched: '2022-09-27T07:31:26.561Z' + - fbjs-scripts > babel-preset-fbjs > @babel/plugin-transform-parameters > @babel/helper-call-delegate > @babel/traverse > @babel/generator > lodash: + patched: '2022-09-27T07:31:26.561Z' + - metro > babel-preset-fbjs > @babel/plugin-transform-parameters > @babel/helper-call-delegate > @babel/traverse > @babel/generator > lodash: + patched: '2022-09-27T07:31:26.561Z' + - metro > metro-react-native-babel-preset > @babel/plugin-transform-exponentiation-operator > @babel/helper-builder-binary-assignment-operator-visitor > @babel/helper-explode-assignable-expression > @babel/traverse > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest-junit > jest-config > babel-core > babel-template > babel-traverse > babel-types > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest-junit > jest-config > babel-core > babel-helpers > babel-template > babel-types > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest-junit > jest-config > babel-jest > babel-plugin-istanbul > istanbul-lib-instrument > babel-types > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest-junit > jest-config > babel-jest > babel-plugin-istanbul > istanbul-lib-instrument > babel-generator > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest-junit > jest-config > babel-core > babel-helpers > babel-template > babel-traverse > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest-junit > jest-config > babel-jest > babel-plugin-istanbul > istanbul-lib-instrument > babel-traverse > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest-junit > jest-config > babel-jest > babel-plugin-istanbul > istanbul-lib-instrument > babel-template > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest-junit > jest-config > jest-environment-jsdom > jsdom > request-promise-native > request-promise-core > lodash: + patched: '2022-09-27T07:31:26.561Z' + - fbjs-scripts > babel-preset-fbjs > @babel/plugin-transform-parameters > @babel/helper-call-delegate > @babel/traverse > @babel/helper-split-export-declaration > @babel/types > lodash: + patched: '2022-09-27T07:31:26.561Z' + - metro > babel-preset-fbjs > @babel/plugin-transform-parameters > @babel/helper-call-delegate > @babel/traverse > @babel/helper-split-export-declaration > @babel/types > lodash: + patched: '2022-09-27T07:31:26.561Z' + - metro > metro-react-native-babel-preset > @babel/plugin-transform-exponentiation-operator > @babel/helper-builder-binary-assignment-operator-visitor > @babel/helper-explode-assignable-expression > @babel/traverse > @babel/generator > lodash: + patched: '2022-09-27T07:31:26.561Z' + - metro-babel-register > @babel/plugin-transform-async-to-generator > @babel/helper-remap-async-to-generator > @babel/helper-wrap-function > @babel/traverse > @babel/helper-split-export-declaration > @babel/types > lodash: + patched: '2022-09-27T07:31:26.561Z' + - fbjs-scripts > @babel/core > @babel/helpers > @babel/traverse > @babel/helper-function-name > @babel/helper-get-function-arity > @babel/types > lodash: + patched: '2022-09-27T07:31:26.561Z' + - metro > @babel/core > @babel/helpers > @babel/traverse > @babel/helper-function-name > @babel/helper-get-function-arity > @babel/types > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest-junit > jest-config > babel-jest > babel-plugin-istanbul > istanbul-lib-instrument > babel-generator > babel-types > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest-junit > jest-config > babel-core > babel-helpers > babel-template > babel-traverse > babel-types > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest-junit > jest-config > babel-jest > babel-plugin-istanbul > istanbul-lib-instrument > babel-traverse > babel-types > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest-junit > jest-config > babel-jest > babel-plugin-istanbul > istanbul-lib-instrument > babel-template > babel-types > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest > jest-cli > jest-config > babel-jest > babel-plugin-istanbul > istanbul-lib-instrument > babel-types > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest > jest-cli > jest-config > babel-jest > babel-plugin-istanbul > istanbul-lib-instrument > babel-generator > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest-junit > jest-config > babel-jest > babel-plugin-istanbul > istanbul-lib-instrument > babel-template > babel-traverse > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest > jest-cli > jest-config > babel-jest > babel-plugin-istanbul > istanbul-lib-instrument > babel-traverse > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest > jest-cli > jest-config > babel-jest > babel-plugin-istanbul > istanbul-lib-instrument > babel-template > lodash: + patched: '2022-09-27T07:31:26.561Z' + - metro > metro-react-native-babel-preset > @babel/plugin-transform-exponentiation-operator > @babel/helper-builder-binary-assignment-operator-visitor > @babel/helper-explode-assignable-expression > @babel/traverse > @babel/helper-split-export-declaration > @babel/types > lodash: + patched: '2022-09-27T07:31:26.561Z' + - fbjs-scripts > babel-preset-fbjs > @babel/plugin-transform-parameters > @babel/helper-call-delegate > @babel/traverse > @babel/helper-function-name > @babel/helper-get-function-arity > @babel/types > lodash: + patched: '2022-09-27T07:31:26.561Z' + - metro > babel-preset-fbjs > @babel/plugin-transform-parameters > @babel/helper-call-delegate > @babel/traverse > @babel/helper-function-name > @babel/helper-get-function-arity > @babel/types > lodash: + patched: '2022-09-27T07:31:26.561Z' + - metro-babel-register > @babel/plugin-transform-async-to-generator > @babel/helper-remap-async-to-generator > @babel/helper-wrap-function > @babel/traverse > @babel/helper-function-name > @babel/helper-get-function-arity > @babel/types > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest > jest-cli > jest-config > babel-jest > babel-plugin-istanbul > istanbul-lib-instrument > babel-generator > babel-types > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest-junit > jest-config > babel-jest > babel-plugin-istanbul > istanbul-lib-instrument > babel-template > babel-traverse > babel-types > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest > jest-cli > jest-config > babel-jest > babel-plugin-istanbul > istanbul-lib-instrument > babel-traverse > babel-types > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest > jest-cli > jest-config > babel-jest > babel-plugin-istanbul > istanbul-lib-instrument > babel-template > babel-types > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest > jest-cli > jest-runtime > jest-config > babel-jest > babel-plugin-istanbul > istanbul-lib-instrument > babel-types > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest > jest-cli > jest-runner > jest-config > babel-jest > babel-plugin-istanbul > istanbul-lib-instrument > babel-types > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest > jest-cli > jest-runtime > jest-config > babel-jest > babel-plugin-istanbul > istanbul-lib-instrument > babel-generator > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest > jest-cli > jest-runner > jest-config > babel-jest > babel-plugin-istanbul > istanbul-lib-instrument > babel-generator > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest > jest-cli > jest-config > babel-jest > babel-plugin-istanbul > istanbul-lib-instrument > babel-template > babel-traverse > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest > jest-cli > jest-runtime > jest-config > babel-jest > babel-plugin-istanbul > istanbul-lib-instrument > babel-traverse > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest > jest-cli > jest-runner > jest-config > babel-jest > babel-plugin-istanbul > istanbul-lib-instrument > babel-traverse > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest > jest-cli > jest-runtime > jest-config > babel-jest > babel-plugin-istanbul > istanbul-lib-instrument > babel-template > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest > jest-cli > jest-runner > jest-config > babel-jest > babel-plugin-istanbul > istanbul-lib-instrument > babel-template > lodash: + patched: '2022-09-27T07:31:26.561Z' + - metro > metro-react-native-babel-preset > @babel/plugin-transform-exponentiation-operator > @babel/helper-builder-binary-assignment-operator-visitor > @babel/helper-explode-assignable-expression > @babel/traverse > @babel/helper-function-name > @babel/helper-get-function-arity > @babel/types > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest > jest-cli > jest-runtime > jest-config > babel-jest > babel-plugin-istanbul > istanbul-lib-instrument > babel-generator > babel-types > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest > jest-cli > jest-runner > jest-config > babel-jest > babel-plugin-istanbul > istanbul-lib-instrument > babel-generator > babel-types > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest > jest-cli > jest-config > babel-jest > babel-plugin-istanbul > istanbul-lib-instrument > babel-template > babel-traverse > babel-types > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest > jest-cli > jest-runtime > jest-config > babel-jest > babel-plugin-istanbul > istanbul-lib-instrument > babel-traverse > babel-types > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest > jest-cli > jest-runner > jest-config > babel-jest > babel-plugin-istanbul > istanbul-lib-instrument > babel-traverse > babel-types > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest > jest-cli > jest-runtime > jest-config > babel-jest > babel-plugin-istanbul > istanbul-lib-instrument > babel-template > babel-types > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest > jest-cli > jest-runner > jest-config > babel-jest > babel-plugin-istanbul > istanbul-lib-instrument > babel-template > babel-types > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest > jest-cli > jest-runner > jest-runtime > jest-config > babel-jest > babel-plugin-istanbul > istanbul-lib-instrument > babel-types > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest > jest-cli > jest-runner > jest-runtime > jest-config > babel-jest > babel-plugin-istanbul > istanbul-lib-instrument > babel-generator > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest > jest-cli > jest-runtime > jest-config > babel-jest > babel-plugin-istanbul > istanbul-lib-instrument > babel-template > babel-traverse > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest > jest-cli > jest-runner > jest-config > babel-jest > babel-plugin-istanbul > istanbul-lib-instrument > babel-template > babel-traverse > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest > jest-cli > jest-runner > jest-runtime > jest-config > babel-jest > babel-plugin-istanbul > istanbul-lib-instrument > babel-traverse > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest > jest-cli > jest-runner > jest-runtime > jest-config > babel-jest > babel-plugin-istanbul > istanbul-lib-instrument > babel-template > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest > jest-cli > jest-runner > jest-runtime > jest-config > babel-jest > babel-plugin-istanbul > istanbul-lib-instrument > babel-generator > babel-types > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest > jest-cli > jest-runtime > jest-config > babel-jest > babel-plugin-istanbul > istanbul-lib-instrument > babel-template > babel-traverse > babel-types > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest > jest-cli > jest-runner > jest-config > babel-jest > babel-plugin-istanbul > istanbul-lib-instrument > babel-template > babel-traverse > babel-types > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest > jest-cli > jest-runner > jest-runtime > jest-config > babel-jest > babel-plugin-istanbul > istanbul-lib-instrument > babel-traverse > babel-types > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest > jest-cli > jest-runner > jest-runtime > jest-config > babel-jest > babel-plugin-istanbul > istanbul-lib-instrument > babel-template > babel-types > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest > jest-cli > jest-runner > jest-runtime > jest-config > babel-jest > babel-plugin-istanbul > istanbul-lib-instrument > babel-template > babel-traverse > lodash: + patched: '2022-09-27T07:31:26.561Z' + - jest > jest-cli > jest-runner > jest-runtime > jest-config > babel-jest > babel-plugin-istanbul > istanbul-lib-instrument > babel-template > babel-traverse > babel-types > lodash: + patched: '2022-09-27T07:31:26.561Z' diff --git a/package.json b/package.json index 2d33da14eee723..7b826c373ba021 100644 --- a/package.json +++ b/package.json @@ -141,7 +141,9 @@ "test-android-unit": "yarn run docker-build-android && yarn run test-android-run-unit", "test-android-e2e": "yarn run docker-build-android && yarn run test-android-run-e2e", "build-ios-e2e": "detox build -c ios.sim.release", - "test-ios-e2e": "detox test -c ios.sim.release --cleanup" + "test-ios-e2e": "detox test -c ios.sim.release --cleanup", + "prepublish": "npm run snyk-protect", + "snyk-protect": "snyk-protect" }, "bin": { "react-native": "local-cli/wrong-react-native.js" @@ -158,52 +160,53 @@ "commander": "^2.9.0", "compression": "^1.7.1", "connect": "^3.6.5", - "create-react-class": "^15.6.3", + "create-react-class": "^15.7.0", "debug": "^2.2.0", "denodeify": "^1.2.1", "envinfo": "^5.7.0", "errorhandler": "^1.5.0", "escape-string-regexp": "^1.0.5", "event-target-shim": "^1.0.5", - "fbjs": "^1.0.0", + "fbjs": "^2.0.0", "fbjs-scripts": "^1.0.0", "fs-extra": "^1.0.0", "glob": "^7.1.1", "graceful-fs": "^4.1.3", "inquirer": "^3.0.6", - "jest": "24.0.0-alpha.6", - "jest-junit": "5.2.0", - "lodash": "^4.17.5", - "metro": "0.50.0", + "jest": "24.0.0", + "jest-junit": "6.2.0", + "lodash": "^4.17.21", + "metro": "0.67.0", "metro-babel-register": "0.50.0", - "metro-core": "0.50.0", + "metro-core": "0.54.0", "metro-memory-fs": "0.50.0", "mime": "^1.3.4", - "minimist": "^1.2.0", - "mkdirp": "^0.5.1", + "minimist": "^1.2.6", + "mkdirp": "^0.5.2", "morgan": "^1.9.0", - "node-fetch": "^2.2.0", - "node-notifier": "^5.2.1", + "node-fetch": "^2.6.7", + "node-notifier": "^5.4.5", "npmlog": "^2.0.4", "nullthrows": "^1.1.0", "opn": "^3.0.2", "optimist": "^0.6.1", - "plist": "^3.0.0", - "pretty-format": "24.0.0-alpha.6", + "plist": "^3.0.4", + "pretty-format": "24.0.0", "promise": "^7.1.1", "prop-types": "^15.5.8", "react-clone-referenced-element": "^1.0.1", - "react-devtools-core": "^3.4.2", + "react-devtools-core": "^4.0.0", "regenerator-runtime": "^0.11.0", "rimraf": "^2.5.4", "semver": "^5.0.3", "serve-static": "^1.13.1", - "shell-quote": "1.6.1", + "shell-quote": "1.7.3", "stacktrace-parser": "^0.1.3", - "ws": "^1.1.0", - "xcode": "^1.0.0", + "ws": "^5.2.3", + "xcode": "^2.0.0", "xmldoc": "^0.4.0", - "yargs": "^9.0.0" + "yargs": "^13.2.4", + "@snyk/protect": "latest" }, "devDependencies": { "@babel/core": "^7.0.0", @@ -222,8 +225,8 @@ "eslint-plugin-react": "7.8.2", "eslint-plugin-react-native": "3.5.0", "flow-bin": "^0.87.0", - "jest": "24.0.0-alpha.6", - "jest-junit": "5.2.0", + "jest": "24.0.0", + "jest-junit": "6.2.0", "prettier": "1.13.6", "react": "16.6.1", "react-native-dummy": "0.1.0", @@ -242,5 +245,6 @@ "name": "iPhone 8" } } - } + }, + "snyk": true }