From 4f48d3d6c53a00e37dff237b405d0d289e33ebdb Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 9 May 2018 22:39:53 +0000 Subject: [PATCH] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/npm:minimatch:20160620 The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:minimatch:20160620 Latest report for labshare/lsc:package.json: https://snyk.io/test/github/labshare/lsc?targetFile=package.json --- .snyk | 12 ++++++++++++ package.json | 12 ++++++++---- 2 files changed, 20 insertions(+), 4 deletions(-) create mode 100644 .snyk diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..f7bfd0c --- /dev/null +++ b/.snyk @@ -0,0 +1,12 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.12.0 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:minimatch:20160620': + - gulp > vinyl-fs > glob-stream > minimatch: + patched: '2018-05-09T22:39:53.161Z' + - gulp > vinyl-fs > glob-watcher > gaze > globule > minimatch: + patched: '2018-05-09T22:39:53.161Z' + - gulp > vinyl-fs > glob-watcher > gaze > globule > glob > minimatch: + patched: '2018-05-09T22:39:53.161Z' diff --git a/package.json b/package.json index 18de716..55058fb 100644 --- a/package.json +++ b/package.json @@ -24,7 +24,9 @@ "test": "jasmine-node --captureExceptions --color ./test/lib/unit", "coverage": "istanbul cover jasmine-node ./test/lib/unit", "build": "tsc", - "watch:build": "tsc --watch" + "watch:build": "tsc --watch", + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" }, "bin": { "lsc": "./lib/bin/lsc.js" @@ -41,7 +43,7 @@ "flatiron-cli-config": "^0.1.5", "fluent-logger": "^2.0.1", "glob": "^7.1.1", - "gulp": "^3.9.1", + "gulp": "^4.0.0", "gulp-conflict": "^0.4.0", "gulp-rename": "^1.2.2", "gulp-template": "^4.0.0", @@ -55,7 +57,8 @@ "underscore.string": "^3.3.4", "untildify": "^3.0.2", "winston": "2.3.1", - "yargs": "^8.0.2" + "yargs": "^8.0.2", + "snyk": "^1.80.0" }, "devDependencies": { "@types/jasmine": "^2.6.0", @@ -64,5 +67,6 @@ "jasmine-node": "^1.14.5", "mock-fs": "^4.4.1", "typescript": "^2.5.3" - } + }, + "snyk": true }