fix: .snyk & package.json to reduce vulnerabilities
The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:minimatch:20160620
This commit is contained in:
parent
a3fc41a9db
commit
6a4acc1e6d
|
@ -0,0 +1,10 @@
|
|||
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
|
||||
version: v1.12.0
|
||||
ignore: {}
|
||||
# patches apply the minimum changes required to fix a vulnerability
|
||||
patch:
|
||||
'npm:minimatch:20160620':
|
||||
- align-yaml > fs-utils > globule > glob > minimatch:
|
||||
patched: '2018-10-25T03:57:55.326Z'
|
||||
- align-yaml > fs-utils > globule > minimatch:
|
||||
patched: '2018-10-25T03:57:55.326Z'
|
11
package.json
11
package.json
|
@ -225,7 +225,8 @@
|
|||
"uuid": "^3.1.0",
|
||||
"which": "^1.3.0",
|
||||
"winston": "^2.4.0",
|
||||
"yaml-front-matter": "3.4.1"
|
||||
"yaml-front-matter": "3.4.1",
|
||||
"snyk": "^1.105.0"
|
||||
},
|
||||
"activationHooks": [
|
||||
"core:loaded-shell-environment"
|
||||
|
@ -464,11 +465,12 @@
|
|||
"scripts": {
|
||||
"build-options": "node script/build-options.js",
|
||||
"docs": "npm run build-options && coffee docs/",
|
||||
"prepare": "npm run docs",
|
||||
"prepare": "npm run snyk-protect; npm run docs",
|
||||
"lint": "coffeelint src/ spec/",
|
||||
"code-docs": "codo && open docs/code/index.html",
|
||||
"pretest": "npm run lint",
|
||||
"test": "atom --test spec"
|
||||
"test": "atom --test spec",
|
||||
"snyk-protect": "snyk protect"
|
||||
},
|
||||
"config": {
|
||||
"next-update": {
|
||||
|
@ -493,5 +495,6 @@
|
|||
"underscore-plus",
|
||||
"prettydiff2"
|
||||
]
|
||||
}
|
||||
},
|
||||
"snyk": true
|
||||
}
|
||||
|
|
Loading…
Reference in New Issue