From 1b69d52142326acd8140b576331eb639cf9cc10a Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 5 Jul 2018 08:23:13 +0000 Subject: [PATCH] fix: .snyk & package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/npm:lodash:20180130 The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:lodash:20180130 --- .snyk | 8 ++++++++ package.json | 10 +++++++--- 2 files changed, 15 insertions(+), 3 deletions(-) create mode 100644 .snyk diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..df1b802 --- /dev/null +++ b/.snyk @@ -0,0 +1,8 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.12.0 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:lodash:20180130': + - ember-cli-babel > broccoli-babel-transpiler > babel-core > babel-plugin-proto-to-assign > lodash: + patched: '2018-07-05T08:23:11.880Z' diff --git a/package.json b/package.json index a13e222..509e991 100644 --- a/package.json +++ b/package.json @@ -9,7 +9,9 @@ "scripts": { "build": "ember build", "start": "ember server", - "test": "ember try:each" + "test": "ember try:each", + "snyk-protect": "snyk protect", + "prepare": "npm run snyk-protect" }, "repository": "", "engines": { @@ -44,9 +46,11 @@ "ember-addon" ], "dependencies": { - "ember-cli-babel": "^5.1.6" + "ember-cli-babel": "^6.0.0", + "snyk": "^1.88.1" }, "ember-addon": { "configPath": "tests/dummy/config" - } + }, + "snyk": true }