diff --git a/admin/.snyk b/admin/.snyk new file mode 100644 index 0000000000..a966c7b525 --- /dev/null +++ b/admin/.snyk @@ -0,0 +1,8 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.22.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - react-admin > ra-ui-materialui > ra-core > redux-form > lodash: + patched: '2022-03-25T22:39:42.933Z' diff --git a/admin/package-lock.json b/admin/package-lock.json index aa6ecf1bbc..3aa8f58ee6 100644 --- a/admin/package-lock.json +++ b/admin/package-lock.json @@ -1123,6 +1123,11 @@ } } }, + "@snyk/protect": { + "version": "1.883.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.883.0.tgz", + "integrity": "sha512-N/EqG6P/qNYWOfuZAfGS1d7yGwGY4zV7AvKtgTzdhazDt7G/mRLG6czLSWNWGEFYBiMsYRVPHdc5It3bjhmIGw==" + }, "@types/babel__core": { "version": "7.1.3", "resolved": "https://registry.npmjs.org/@types/babel__core/-/babel__core-7.1.3.tgz", @@ -6760,12 +6765,8 @@ "@fortawesome/react-fontawesome": "^0.1.0", "@mozillareality/three-batch-manager": "^0.1.4", "@mozillareality/three-particle-emitter": "^0.1.5", - "aframe": "aframe@github:mozillareality/aframe#hubs/master", "aframe-rounded": "^1.0.3", "aframe-slice9-component": "^1.0.0", - "ammo-debug-drawer": "ammo-debug-drawer@github:infinitelee/ammo-debug-drawer", - "ammo.js": "ammo.js@github:mozillareality/ammo.js#hubs/master", - "animejs": "animejs@github:mozillareality/anime#hubs/master", "buffered-interpolation": "^0.2.5", "classnames": "^2.2.5", "copy-to-clipboard": "^3.0.8", @@ -6788,11 +6789,8 @@ "markdown-it": "^8.4.2", "moving-average": "^1.0.0", "naf-janus-adapter": "^3.0.10", - "networked-aframe": "networked-aframe@github:mozillareality/networked-aframe#master", - "nipplejs": "nipplejs@github:mozillareality/nipplejs#mr-social-client/master", "node-ensure": "0.0.0", "pdfjs-dist": "^2.1.266", - "phoenix": "phoenix@github:gfodor/phoenix-js#master", "raven-js": "^3.20.1", "react": "^16.1.1", "react-dom": "^16.1.1", @@ -6804,12 +6802,8 @@ "react-router-dom": "^4.3.1", "react-youtube": "^7.8.0", "screenfull": "^4.0.1", - "three": "three@github:mozillareality/three.js#hubs/master", - "three-ammo": "three-ammo@github:infinitelee/three-ammo#master", "three-bmfont-text": "^2.3.0", "three-mesh-bvh": "^0.1.2", - "three-pathfinding": "three-pathfinding@github:MozillaReality/three-pathfinding#hubs/master2", - "three-to-ammo": "three-to-ammo@github:infinitelee/three-to-ammo", "uuid": "^3.2.1", "webrtc-adapter": "^6.0.2", "zip-loader": "^1.1.0" @@ -9815,12 +9809,9 @@ "version": "github:mozillareality/aframe#hubs/master", "from": "aframe@github:mozillareality/aframe#hubs/master", "requires": { - "animejs": "animejs@github:mozillareality/anime#hubs/master", "browserify-css": "^0.8.4", "custom-event-polyfill": "^1.0.6", - "debug": "debug@github:ngokevin/debug#noTimestamp", "deep-assign": "^2.0.0", - "document-register-element": "document-register-element@github:dmarcos/document-register-element#8ccc532b7f3744be954574caf3072a5fd260ca90", "envify": "^3.4.1", "object-assign": "^4.0.1", "present": "0.0.6", @@ -21345,7 +21336,7 @@ }, "spritesheet-js": { "version": "1.2.6", - "resolved": "", + "resolved": false, "integrity": "sha1-undkekb6cwaFGhc61p8QWz37tpU=", "requires": { "async": "~0.2.9", @@ -21353,7 +21344,6 @@ "glob": "~3.2.6", "mustache": "~0.7.2", "optimist": "~0.6.0", - "platform-command": "platform-command@git+https://gitlab.com/gitlabdev/platform-command.git", "underscore": "~1.5.2" }, "dependencies": { diff --git a/admin/package.json b/admin/package.json index ba8d055620..9184be9755 100644 --- a/admin/package.json +++ b/admin/package.json @@ -15,7 +15,9 @@ "lint:js": "eslint '*.js' 'src/**/*.js'", "lint:html": "htmlhint 'src/**/*.html'", "lint": "npm run lint:js && npm run lint:html", - "test": "npm run lint && npm run build" + "test": "npm run lint && npm run build", + "prepare": "npm run snyk-protect", + "snyk-protect": "snyk-protect" }, "dependencies": { "@iarna/toml": "^2.2.3", @@ -26,7 +28,8 @@ "react-admin": "^2.6.3", "react-dom": "^16.1.1", "react-intl": "^2.4.0", - "three": "github:mozillareality/three.js#hubs/master" + "three": "github:mozillareality/three.js#hubs/master", + "@snyk/protect": "latest" }, "devDependencies": { "@babel/core": "^7.3.3", @@ -67,5 +70,6 @@ "webpack-cli": "^3.2.3", "webpack-dev-server": "^3.1.14", "worker-loader": "^2.0.0" - } + }, + "snyk": true }