From 5fe72120bfe2dac2fd4562bd96861201e35c0bf0 Mon Sep 17 00:00:00 2001
From: Philippe Coval <p.coval@samsung.com>
Date: Wed, 8 Aug 2018 16:10:40 +0200
Subject: [PATCH 1/2] build: Reformat json file before dep upgrade

Change-Id: Ia217d5d6412a44a37127522b963f35aca73d650e
Signed-off-by: Philippe Coval <p.coval@samsung.com>
---
 package.json | 50 +++++++++++++++++++++++++-------------------------
 1 file changed, 25 insertions(+), 25 deletions(-)

diff --git a/package.json b/package.json
index c00affc..b875e8d 100644
--- a/package.json
+++ b/package.json
@@ -1,27 +1,27 @@
 {
-    "name": "bh1750",
-    "description": "light sensor bh1750 with raspberry pi",
-    "author": "Miroslav Rúčka, Jos Hendriks",
-    "version": "0.0.4",
-    "main": "bh1750",
-    "scripts": {
-        "test": "node example"
-    },
-    "repository": {
-        "type": "git",
-        "url": "https://github.com/miroRucka/bh1750"
-    },
-    "dependencies": {
-        "lodash": "2.4.1",
-        "i2c": "~0.2.1"
-    },
-    "keywords": [
-        "raspberry, raspberry pi, light, sensor, bh1750"
-    ],
-    "licenses": [
-        {
-            "type": "MIT",
-            "url": "http://mths.be/mit"
-        }
-    ]
+  "name": "bh1750",
+  "description": "light sensor bh1750 with raspberry pi",
+  "author": "Miroslav Rúčka, Jos Hendriks",
+  "version": "0.0.4",
+  "main": "bh1750",
+  "scripts": {
+    "test": "node example"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/miroRucka/bh1750"
+  },
+  "dependencies": {
+    "i2c": "~0.2.1",
+    "lodash": "2.4.1"
+  },
+  "keywords": [
+    "raspberry, raspberry pi, light, sensor, bh1750"
+  ],
+  "licenses": [
+    {
+      "type": "MIT",
+      "url": "http://mths.be/mit"
+    }
+  ]
 }

From 9698496c59f68341863d8c402f0a446636021ce0 Mon Sep 17 00:00:00 2001
From: Philippe Coval <p.coval@samsung.com>
Date: Wed, 8 Aug 2018 16:12:09 +0200
Subject: [PATCH 2/2] build: Update loadash to latest to fix CVE

Relate-to: https://nvd.nist.gov/vuln/detail/CVE-2018-3721
Change-Id: I020b66ddb049ec9614b4117c4554e995ed8a591e
Signed-off-by: Philippe Coval <p.coval@samsung.com>
---
 package.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/package.json b/package.json
index b875e8d..1f927af 100644
--- a/package.json
+++ b/package.json
@@ -13,7 +13,7 @@
   },
   "dependencies": {
     "i2c": "~0.2.1",
-    "lodash": "2.4.1"
+    "lodash": "^4.17.10"
   },
   "keywords": [
     "raspberry, raspberry pi, light, sensor, bh1750"