From 0189bc9a567b227dccd40eeb92def3b1aa6d709a Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 8 Sep 2017 14:27:51 +0000 Subject: [PATCH] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:ms:20170412 Latest report for bizzotech/kunafa-client: https://snyk.io/test/github/bizzotech/kunafa-client --- .snyk | 8 ++++++++ package.json | 10 +++++++--- 2 files changed, 15 insertions(+), 3 deletions(-) create mode 100644 .snyk diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..44d5784 --- /dev/null +++ b/.snyk @@ -0,0 +1,8 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.7.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:ms:20170412': + - pouchdb > debug > ms: + patched: '2017-09-08T14:27:51.484Z' diff --git a/package.json b/package.json index 4d1d9ac..51de7e9 100644 --- a/package.json +++ b/package.json @@ -14,7 +14,9 @@ "flow": "flow", "test": "jest", "test:watch": "jest --watch", - "coveralls": "cat ./coverage/lcov.info | ./node_modules/coveralls/bin/coveralls.js" + "coveralls": "cat ./coverage/lcov.info | ./node_modules/coveralls/bin/coveralls.js", + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" }, "jest": { "coverageDirectory": "./coverage/", @@ -31,7 +33,8 @@ "reselect": "^3.0.1", "reselect-map": "^1.0.3", "util": "^0.10.3", - "uuid": "^3.0.0" + "uuid": "^3.0.0", + "snyk": "^1.40.2" }, "devDependencies": { "babel-cli": "^6.24.1", @@ -47,5 +50,6 @@ "jest": "^21.0.1", "redux-testkit": "^1.0.6", "regenerator-runtime": "^0.11.0" - } + }, + "snyk": true }