fix: .snyk & package.json to reduce vulnerabilities
The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-450202
This commit is contained in:
30
.snyk
Normal file
30
.snyk
Normal file
@ -0,0 +1,30 @@
|
|||||||
|
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
|
||||||
|
version: v1.13.5
|
||||||
|
ignore: {}
|
||||||
|
# patches apply the minimum changes required to fix a vulnerability
|
||||||
|
patch:
|
||||||
|
SNYK-JS-LODASH-450202:
|
||||||
|
- '@rails/webpacker > node-sass > gaze > globule > lodash':
|
||||||
|
patched: '2019-07-04T06:33:26.979Z'
|
||||||
|
- webpack-merge > lodash:
|
||||||
|
patched: '2019-07-04T06:33:26.979Z'
|
||||||
|
- '@rails/webpacker > optimize-css-assets-webpack-plugin > last-call-webpack-plugin > lodash':
|
||||||
|
patched: '2019-07-04T06:33:26.979Z'
|
||||||
|
- '@rails/webpacker > @babel/preset-env > @babel/plugin-transform-block-scoping > lodash':
|
||||||
|
patched: '2019-07-04T06:33:26.979Z'
|
||||||
|
- '@rails/webpacker > node-sass > sass-graph > lodash':
|
||||||
|
patched: '2019-07-04T06:33:26.979Z'
|
||||||
|
- '@rails/webpacker > @babel/preset-env > @babel/plugin-proposal-unicode-property-regex > @babel/helper-regex > lodash':
|
||||||
|
patched: '2019-07-04T06:33:26.979Z'
|
||||||
|
- '@rails/webpacker > @babel/core > lodash':
|
||||||
|
patched: '2019-07-04T06:33:26.979Z'
|
||||||
|
- '@rails/webpacker > @babel/preset-env > @babel/plugin-transform-modules-commonjs > @babel/helper-module-transforms > @babel/types > lodash':
|
||||||
|
patched: '2019-07-04T06:33:26.979Z'
|
||||||
|
- '@rails/webpacker > @babel/preset-env > @babel/plugin-transform-modules-commonjs > @babel/helper-module-transforms > @babel/helper-split-export-declaration > @babel/types > lodash':
|
||||||
|
patched: '2019-07-04T06:33:26.979Z'
|
||||||
|
- '@rails/webpacker > @babel/preset-env > @babel/plugin-proposal-async-generator-functions > @babel/helper-remap-async-to-generator > @babel/helper-wrap-function > @babel/traverse > @babel/generator > lodash':
|
||||||
|
patched: '2019-07-04T06:33:26.979Z'
|
||||||
|
- '@rails/webpacker > @babel/preset-env > @babel/plugin-transform-exponentiation-operator > @babel/helper-builder-binary-assignment-operator-visitor > @babel/helper-explode-assignable-expression > @babel/traverse > @babel/helper-function-name > @babel/types > lodash':
|
||||||
|
patched: '2019-07-04T06:33:26.979Z'
|
||||||
|
- '@rails/webpacker > @babel/preset-env > @babel/plugin-transform-async-to-generator > @babel/helper-remap-async-to-generator > @babel/helper-wrap-function > @babel/traverse > @babel/helper-function-name > @babel/template > @babel/types > lodash':
|
||||||
|
patched: '2019-07-04T06:33:26.979Z'
|
10
package.json
10
package.json
@ -15,13 +15,17 @@
|
|||||||
"popper.js": "^1.15.0",
|
"popper.js": "^1.15.0",
|
||||||
"underscore": "^1.9.1",
|
"underscore": "^1.9.1",
|
||||||
"vis": "^4.21.0",
|
"vis": "^4.21.0",
|
||||||
"webpack-merge": "^4.1.4"
|
"webpack-merge": "^4.1.4",
|
||||||
|
"snyk": "^1.189.0"
|
||||||
},
|
},
|
||||||
"devDependencies": {
|
"devDependencies": {
|
||||||
"webpack-dev-server": "3.4.1"
|
"webpack-dev-server": "3.4.1"
|
||||||
},
|
},
|
||||||
"scripts": {
|
"scripts": {
|
||||||
"webpack": "./bin/webpack",
|
"webpack": "./bin/webpack",
|
||||||
"webpack-dev-server": "./bin/webpack-dev-server"
|
"webpack-dev-server": "./bin/webpack-dev-server",
|
||||||
}
|
"snyk-protect": "snyk protect",
|
||||||
|
"prepublish": "npm run snyk-protect"
|
||||||
|
},
|
||||||
|
"snyk": true
|
||||||
}
|
}
|
||||||
|
Reference in New Issue
Block a user