fix: .snyk & package.json to reduce vulnerabilities

The following vulnerabilities are fixed with a Snyk patch:
- https://snyk.io/vuln/npm:minimatch:20160620
This commit is contained in:
snyk-bot 2018-10-25 03:57:56 +00:00
parent a3fc41a9db
commit 6a4acc1e6d
2 changed files with 17 additions and 4 deletions

10
.snyk Normal file
View File

@ -0,0 +1,10 @@
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
version: v1.12.0
ignore: {}
# patches apply the minimum changes required to fix a vulnerability
patch:
'npm:minimatch:20160620':
- align-yaml > fs-utils > globule > glob > minimatch:
patched: '2018-10-25T03:57:55.326Z'
- align-yaml > fs-utils > globule > minimatch:
patched: '2018-10-25T03:57:55.326Z'

View File

@ -225,7 +225,8 @@
"uuid": "^3.1.0",
"which": "^1.3.0",
"winston": "^2.4.0",
"yaml-front-matter": "3.4.1"
"yaml-front-matter": "3.4.1",
"snyk": "^1.105.0"
},
"activationHooks": [
"core:loaded-shell-environment"
@ -464,11 +465,12 @@
"scripts": {
"build-options": "node script/build-options.js",
"docs": "npm run build-options && coffee docs/",
"prepare": "npm run docs",
"prepare": "npm run snyk-protect; npm run docs",
"lint": "coffeelint src/ spec/",
"code-docs": "codo && open docs/code/index.html",
"pretest": "npm run lint",
"test": "atom --test spec"
"test": "atom --test spec",
"snyk-protect": "snyk protect"
},
"config": {
"next-update": {
@ -493,5 +495,6 @@
"underscore-plus",
"prettydiff2"
]
}
},
"snyk": true
}