fix: .snyk & package.json to reduce vulnerabilities

The following vulnerabilities are fixed with a Snyk patch:
- https://snyk.io/vuln/SNYK-JS-LODASH-450202
This commit is contained in:
snyk-test
2019-07-04 06:33:28 +00:00
parent 34df8f8cdc
commit 2824a46855
2 changed files with 37 additions and 3 deletions

30
.snyk Normal file
View File

@ -0,0 +1,30 @@
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
version: v1.13.5
ignore: {}
# patches apply the minimum changes required to fix a vulnerability
patch:
SNYK-JS-LODASH-450202:
- '@rails/webpacker > node-sass > gaze > globule > lodash':
patched: '2019-07-04T06:33:26.979Z'
- webpack-merge > lodash:
patched: '2019-07-04T06:33:26.979Z'
- '@rails/webpacker > optimize-css-assets-webpack-plugin > last-call-webpack-plugin > lodash':
patched: '2019-07-04T06:33:26.979Z'
- '@rails/webpacker > @babel/preset-env > @babel/plugin-transform-block-scoping > lodash':
patched: '2019-07-04T06:33:26.979Z'
- '@rails/webpacker > node-sass > sass-graph > lodash':
patched: '2019-07-04T06:33:26.979Z'
- '@rails/webpacker > @babel/preset-env > @babel/plugin-proposal-unicode-property-regex > @babel/helper-regex > lodash':
patched: '2019-07-04T06:33:26.979Z'
- '@rails/webpacker > @babel/core > lodash':
patched: '2019-07-04T06:33:26.979Z'
- '@rails/webpacker > @babel/preset-env > @babel/plugin-transform-modules-commonjs > @babel/helper-module-transforms > @babel/types > lodash':
patched: '2019-07-04T06:33:26.979Z'
- '@rails/webpacker > @babel/preset-env > @babel/plugin-transform-modules-commonjs > @babel/helper-module-transforms > @babel/helper-split-export-declaration > @babel/types > lodash':
patched: '2019-07-04T06:33:26.979Z'
- '@rails/webpacker > @babel/preset-env > @babel/plugin-proposal-async-generator-functions > @babel/helper-remap-async-to-generator > @babel/helper-wrap-function > @babel/traverse > @babel/generator > lodash':
patched: '2019-07-04T06:33:26.979Z'
- '@rails/webpacker > @babel/preset-env > @babel/plugin-transform-exponentiation-operator > @babel/helper-builder-binary-assignment-operator-visitor > @babel/helper-explode-assignable-expression > @babel/traverse > @babel/helper-function-name > @babel/types > lodash':
patched: '2019-07-04T06:33:26.979Z'
- '@rails/webpacker > @babel/preset-env > @babel/plugin-transform-async-to-generator > @babel/helper-remap-async-to-generator > @babel/helper-wrap-function > @babel/traverse > @babel/helper-function-name > @babel/template > @babel/types > lodash':
patched: '2019-07-04T06:33:26.979Z'

View File

@ -15,13 +15,17 @@
"popper.js": "^1.15.0",
"underscore": "^1.9.1",
"vis": "^4.21.0",
"webpack-merge": "^4.1.4"
"webpack-merge": "^4.1.4",
"snyk": "^1.189.0"
},
"devDependencies": {
"webpack-dev-server": "3.4.1"
},
"scripts": {
"webpack": "./bin/webpack",
"webpack-dev-server": "./bin/webpack-dev-server"
}
"webpack-dev-server": "./bin/webpack-dev-server",
"snyk-protect": "snyk protect",
"prepublish": "npm run snyk-protect"
},
"snyk": true
}