diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..b7f7be9 --- /dev/null +++ b/.snyk @@ -0,0 +1,38 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.22.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - vuepress > @vuepress/theme-default > lodash: + patched: '2022-03-25T23:26:14.440Z' + - vuepress > @vuepress/core > @babel/core > lodash: + patched: '2022-03-25T23:26:14.440Z' + - vuepress > @vuepress/core > vuepress-html-webpack-plugin > lodash: + patched: '2022-03-25T23:26:14.440Z' + - vuepress > @vuepress/core > webpack-merge > lodash: + patched: '2022-03-25T23:26:14.440Z' + - vuepress > @vuepress/core > @vue/babel-preset-app > @babel/core > lodash: + patched: '2022-03-25T23:26:14.440Z' + - vuepress > @vuepress/core > optimize-css-assets-webpack-plugin > last-call-webpack-plugin > lodash: + patched: '2022-03-25T23:26:14.440Z' + - vuepress > @vuepress/core > portfinder > async > lodash: + patched: '2022-03-25T23:26:14.440Z' + - vuepress > @vuepress/core > webpack-dev-server > http-proxy-middleware > lodash: + patched: '2022-03-25T23:26:14.440Z' + - vuepress > @vuepress/core > @vue/babel-preset-app > @babel/preset-env > @babel/plugin-transform-block-scoping > lodash: + patched: '2022-03-25T23:26:14.440Z' + - vuepress > @vuepress/core > webpack-dev-server > portfinder > async > lodash: + patched: '2022-03-25T23:26:14.440Z' + - vuepress > @vuepress/core > @vue/babel-preset-app > @babel/preset-env > @babel/plugin-transform-classes > @babel/helper-define-map > lodash: + patched: '2022-03-25T23:26:14.440Z' + - vuepress > @vuepress/core > @vue/babel-preset-app > @babel/preset-env > @babel/plugin-transform-unicode-regex > @babel/helper-create-regexp-features-plugin > @babel/helper-regex > lodash: + patched: '2022-03-25T23:26:14.440Z' + - vuepress > @vuepress/core > @vue/babel-preset-app > @babel/preset-env > @babel/preset-modules > @babel/plugin-transform-dotall-regex > @babel/helper-create-regexp-features-plugin > @babel/helper-regex > lodash: + patched: '2022-03-25T23:26:14.440Z' + - vuepress > @vuepress/core > @vue/babel-preset-app > @babel/preset-env > @babel/plugin-transform-exponentiation-operator > @babel/helper-builder-binary-assignment-operator-visitor > @babel/helper-explode-assignable-expression > @babel/traverse > @babel/generator > lodash: + patched: '2022-03-25T23:26:14.440Z' + - vuepress > @vuepress/core > @vue/babel-preset-app > @babel/preset-env > @babel/plugin-transform-exponentiation-operator > @babel/helper-builder-binary-assignment-operator-visitor > @babel/helper-explode-assignable-expression > @babel/traverse > @babel/helper-split-export-declaration > @babel/types > lodash: + patched: '2022-03-25T23:26:14.440Z' + - vuepress > @vuepress/core > @vue/babel-preset-app > @babel/preset-env > @babel/plugin-transform-exponentiation-operator > @babel/helper-builder-binary-assignment-operator-visitor > @babel/helper-explode-assignable-expression > @babel/traverse > @babel/helper-function-name > @babel/template > @babel/types > lodash: + patched: '2022-03-25T23:26:14.440Z' diff --git a/package.json b/package.json index 24d7a8d..21b58d6 100644 --- a/package.json +++ b/package.json @@ -1,7 +1,9 @@ { "scripts": { "docs:dev": "vuepress dev docs", - "docs:build": "vuepress build docs" + "docs:build": "vuepress build docs", + "prepublish": "npm run snyk-protect", + "snyk-protect": "snyk-protect" }, "dependencies": { "@vuepress/plugin-back-to-top": "^1.4.1", @@ -11,6 +13,8 @@ "vuepress-plugin-clean-urls": "^1.1.1", "vuepress-plugin-matomo": "^1.0.2", "vuepress-plugin-seo": "^0.1.2", - "vuepress-plugin-sitemap": "^2.3.1" - } + "vuepress-plugin-sitemap": "^2.3.1", + "@snyk/protect": "latest" + }, + "snyk": true }