From 2764a977de137530972b13438510cfc69e684f93 Mon Sep 17 00:00:00 2001 From: snyk-test Date: Mon, 8 Jul 2019 04:04:19 +0000 Subject: [PATCH] fix: .snyk & package.json to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-450202 --- .snyk | 10 ++++++++++ package.json | 28 ++++++++++++++++++++++------ 2 files changed, 32 insertions(+), 6 deletions(-) create mode 100644 .snyk mode change 100755 => 100644 package.json diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..38003d8 --- /dev/null +++ b/.snyk @@ -0,0 +1,10 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.13.5 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-450202: + - react-redux > lodash: + patched: '2019-07-08T04:04:13.568Z' + - redux > lodash: + patched: '2019-07-08T04:04:13.568Z' diff --git a/package.json b/package.json old mode 100755 new mode 100644 index 25749bb..78b90fd --- a/package.json +++ b/package.json @@ -37,7 +37,9 @@ "test:firefox": "npm run test -- --browsers Firefox", "test:safari": "npm run test -- --browsers Safari", "test:ie": "npm run test -- --browsers IE", - "coveralls": "cat ./coverage/lcov/lcov.info | coveralls" + "coveralls": "cat ./coverage/lcov/lcov.info | coveralls", + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" }, "pre-commit": "lint:staged", "babel": { @@ -69,14 +71,26 @@ }, "rules": { "import/no-unresolved": 2, - "comma-dangle": [2, "always-multiline"], - "indent": [2, 2, { "SwitchCase": 1 }], + "comma-dangle": [ + 2, + "always-multiline" + ], + "indent": [ + 2, + 2, + { + "SwitchCase": 1 + } + ], "no-console": 1, "max-len": 0, "prefer-template": 2, "no-use-before-define": 0, "newline-per-chained-call": 0, - "arrow-body-style": [2, "as-needed"], + "arrow-body-style": [ + 2, + "as-needed" + ], "jsx-a11y/href-no-hash": 2, "jsx-a11y/label-has-for": 2, "jsx-a11y/mouse-events-have-key-events": 2, @@ -136,7 +150,8 @@ "reselect": "^2.5.1", "sanitize.css": "^3.3.0", "scroll-behavior": "^0.4.0", - "whatwg-fetch": "^0.11.0" + "whatwg-fetch": "^0.11.0", + "snyk": "^1.192.3" }, "devDependencies": { "babel-core": "^6.7.7", @@ -206,5 +221,6 @@ "webpack": "^2.1.0-beta.6", "webpack-dev-middleware": "^1.6.1", "webpack-hot-middleware": "^2.10.0" - } + }, + "snyk": true }