From dd577bab53db6148794b3ef0472175e53ecfd6ea Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 16 May 2019 16:55:59 +0000 Subject: [PATCH] fix: nested-npm/.snyk, nested-npm/package.json & nested-npm/package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - http://localhost:8000/vuln/npm:request:20160119 --- nested-npm/.snyk | 8 ++++++++ nested-npm/package-lock.json | 0 nested-npm/package.json | 10 ++++++++-- 3 files changed, 16 insertions(+), 2 deletions(-) create mode 100644 nested-npm/.snyk mode change 100755 => 100644 nested-npm/package-lock.json mode change 100755 => 100644 nested-npm/package.json diff --git a/nested-npm/.snyk b/nested-npm/.snyk new file mode 100644 index 00000000..ddf00aee --- /dev/null +++ b/nested-npm/.snyk @@ -0,0 +1,8 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.13.3 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:request:20160119': + - tap > codecov.io > request: + patched: '2019-05-16T16:55:57.461Z' diff --git a/nested-npm/package-lock.json b/nested-npm/package-lock.json old mode 100755 new mode 100644 diff --git a/nested-npm/package.json b/nested-npm/package.json old mode 100755 new mode 100644 index 2fd7da2e..72044f34 --- a/nested-npm/package.json +++ b/nested-npm/package.json @@ -10,6 +10,12 @@ "dependencies": { "node-uuid": "1.4.0", "qs": "0.0.6", - "tap": "^5.8.0" - } + "tap": "^5.8.0", + "snyk": "^1.165.0" + }, + "scripts": { + "snyk-protect": "snyk protect", + "prepare": "npm run snyk-protect" + }, + "snyk": true }