Merge pull request #355 from openHPI/snyk-fix-d1b3eb5e1a7bf5e018a76df0f2b7aafb

[Snyk] Fix for 1 vulnerable dependencies
This commit is contained in:
MrSerth
2019-10-24 06:55:32 -04:00
committed by GitHub
2 changed files with 37 additions and 3 deletions

30
.snyk Normal file
View File

@ -0,0 +1,30 @@
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
version: v1.13.5
ignore: {}
# patches apply the minimum changes required to fix a vulnerability
patch:
SNYK-JS-LODASH-450202:
- '@rails/webpacker > node-sass > gaze > globule > lodash':
patched: '2019-07-04T06:33:26.979Z'
- webpack-merge > lodash:
patched: '2019-07-04T06:33:26.979Z'
- '@rails/webpacker > optimize-css-assets-webpack-plugin > last-call-webpack-plugin > lodash':
patched: '2019-07-04T06:33:26.979Z'
- '@rails/webpacker > @babel/preset-env > @babel/plugin-transform-block-scoping > lodash':
patched: '2019-07-04T06:33:26.979Z'
- '@rails/webpacker > node-sass > sass-graph > lodash':
patched: '2019-07-04T06:33:26.979Z'
- '@rails/webpacker > @babel/preset-env > @babel/plugin-proposal-unicode-property-regex > @babel/helper-regex > lodash':
patched: '2019-07-04T06:33:26.979Z'
- '@rails/webpacker > @babel/core > lodash':
patched: '2019-07-04T06:33:26.979Z'
- '@rails/webpacker > @babel/preset-env > @babel/plugin-transform-modules-commonjs > @babel/helper-module-transforms > @babel/types > lodash':
patched: '2019-07-04T06:33:26.979Z'
- '@rails/webpacker > @babel/preset-env > @babel/plugin-transform-modules-commonjs > @babel/helper-module-transforms > @babel/helper-split-export-declaration > @babel/types > lodash':
patched: '2019-07-04T06:33:26.979Z'
- '@rails/webpacker > @babel/preset-env > @babel/plugin-proposal-async-generator-functions > @babel/helper-remap-async-to-generator > @babel/helper-wrap-function > @babel/traverse > @babel/generator > lodash':
patched: '2019-07-04T06:33:26.979Z'
- '@rails/webpacker > @babel/preset-env > @babel/plugin-transform-exponentiation-operator > @babel/helper-builder-binary-assignment-operator-visitor > @babel/helper-explode-assignable-expression > @babel/traverse > @babel/helper-function-name > @babel/types > lodash':
patched: '2019-07-04T06:33:26.979Z'
- '@rails/webpacker > @babel/preset-env > @babel/plugin-transform-async-to-generator > @babel/helper-remap-async-to-generator > @babel/helper-wrap-function > @babel/traverse > @babel/helper-function-name > @babel/template > @babel/types > lodash':
patched: '2019-07-04T06:33:26.979Z'

View File

@ -15,13 +15,17 @@
"popper.js": "^1.15.0",
"underscore": "^1.9.1",
"vis": "^4.21.0",
"webpack-merge": "^4.1.4"
"webpack-merge": "^4.1.4",
"snyk": "^1.189.0"
},
"devDependencies": {
"webpack-dev-server": "3.4.1"
},
"scripts": {
"webpack": "./bin/webpack",
"webpack-dev-server": "./bin/webpack-dev-server"
}
"webpack-dev-server": "./bin/webpack-dev-server",
"snyk-protect": "snyk protect",
"prepublish": "npm run snyk-protect"
},
"snyk": true
}