diff --git a/.snyk b/.snyk new file mode 100644 index 000000000..7e3211a91 --- /dev/null +++ b/.snyk @@ -0,0 +1,43 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.19.0 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:debug:20170905': + - sails-hook-sockets > socket.io-client > debug: + patched: '2020-08-17T06:12:16.984Z' + - sails-hook-sockets > socket.io > debug: + patched: '2020-08-17T06:12:16.984Z' + - sails-hook-sockets > socket.io > engine.io > debug: + patched: '2020-08-17T06:12:16.984Z' + - sails-hook-sockets > socket.io-client > engine.io-client > debug: + patched: '2020-08-17T06:12:16.984Z' + - sails-hook-sockets > socket.io > socket.io-client > debug: + patched: '2020-08-17T06:12:16.984Z' + - sails-hook-sockets > socket.io > socket.io-client > engine.io-client > debug: + patched: '2020-08-17T06:12:16.984Z' + 'npm:ms:20151024': + - sails-hook-sockets > socket.io-client > debug > ms: + patched: '2020-08-17T06:12:16.984Z' + - sails-hook-sockets > socket.io > debug > ms: + patched: '2020-08-17T06:12:16.984Z' + - sails-hook-sockets > socket.io > engine.io > debug > ms: + patched: '2020-08-17T06:12:16.984Z' + - sails-hook-sockets > socket.io-client > engine.io-client > debug > ms: + patched: '2020-08-17T06:12:16.984Z' + - sails-hook-sockets > socket.io > socket.io-client > debug > ms: + patched: '2020-08-17T06:12:16.984Z' + - sails-hook-sockets > socket.io > socket.io-client > engine.io-client > debug > ms: + patched: '2020-08-17T06:12:16.984Z' + - sails-hook-sockets > socket.io > socket.io-adapter > debug > ms: + patched: '2020-08-17T06:12:16.984Z' + 'npm:negotiator:20160616': + - sails-hook-sockets > socket.io > engine.io > accepts > negotiator: + patched: '2020-08-17T06:12:16.984Z' + 'npm:ws:20160920': + - sails-hook-sockets > socket.io > engine.io > ws: + patched: '2020-08-17T06:12:16.984Z' + - sails-hook-sockets > socket.io-client > engine.io-client > ws: + patched: '2020-08-17T06:12:16.984Z' + - sails-hook-sockets > socket.io > socket.io-client > engine.io-client > ws: + patched: '2020-08-17T06:12:16.984Z' diff --git a/package.json b/package.json index 40160c750..ae674c36e 100644 --- a/package.json +++ b/package.json @@ -22,16 +22,17 @@ }, "scripts": { "test": "mocha -b", - "prepublish": "npm prune", - "preinstall": "node ./lib/preinstall_npmcheck.js" + "prepublish": "npm run snyk-protect && npm prune", + "preinstall": "node ./lib/preinstall_npmcheck.js", + "snyk-protect": "snyk protect" }, "directories": { "lib": "lib" }, "dependencies": { - "anchor": "~0.10.2", + "anchor": "~0.11.4", "async": "~0.9.0", - "captains-log": "~0.11.11", + "captains-log": "~1.0.2", "colors": "~1.0.3", "commander": "~2.7.1", "connect-flash": "~0.1.1", @@ -44,21 +45,21 @@ "express-handlebars": "~2.0.0", "fs-extra": "~0.18.0", "glob": "~5.0.3", - "grunt": "0.4.5", - "grunt-cli": "~0.1.13", + "grunt": "1.0.3", + "grunt-cli": "~1.3.0", "grunt-contrib-clean": "~0.6.0", - "grunt-contrib-coffee": "~0.13.0", + "grunt-contrib-coffee": "~2.0.0", "grunt-contrib-concat": "~0.5.1", "grunt-contrib-copy": "~0.8.0", "grunt-contrib-cssmin": "~0.12.2", "grunt-contrib-jst": "~0.6.0", - "grunt-contrib-less": "1.0.0", - "grunt-contrib-uglify": "~0.8.1", - "grunt-contrib-watch": "~0.6.1", + "grunt-contrib-less": "1.3.0", + "grunt-contrib-uglify": "~0.11.1", + "grunt-contrib-watch": "~1.0.1", "grunt-sails-linker": "~0.10.1", - "grunt-sync": "~0.2.3", + "grunt-sync": "~0.6.2", "i18n": "~0.5.0", - "lodash": "~2.4.1", + "lodash": "~4.17.20", "merge-defaults": "~0.2.1", "method-override": "~2.3.2", "mock-req": "0.2.0", @@ -66,10 +67,10 @@ "pluralize": "~1.1.2", "prompt": "~0.2.14", "rc": "~1.0.1", - "reportback": "~0.1.8", + "reportback": "~2.0.1", "sails-build-dictionary": "~0.10.1", - "sails-disk": "~0.10.7", - "sails-generate": "~0.12.3", + "sails-disk": "~1.0.0", + "sails-generate": "~1.16.8", "sails-hook-sockets": "pmq20/sails-hook-sockets#873c052", "sails-stringfile": "~0.3.2", "sails-util": "~0.10.6", @@ -77,7 +78,8 @@ "skipper": "~0.5.5", "uid-safe": "^1.1.0", "walk": "^2.3.9", - "waterline": "~0.10.26" + "waterline": "~0.13.1", + "snyk": "^1.374.0" }, "devDependencies": { "root-require": "~0.3.1", @@ -105,5 +107,6 @@ "engines": { "node": ">= 0.10.0", "npm": ">= 1.4.0" - } + }, + "snyk": true }