Skip to content

Commit ad7751c

Browse files
committed
fix: package.json & .snyk to reduce vulnerabilities
The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-HTTPSPROXYAGENT-469131
1 parent f860e51 commit ad7751c

File tree

2 files changed

+20
-2
lines changed

2 files changed

+20
-2
lines changed

.snyk

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,12 @@
1+
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
2+
version: v1.13.5
3+
ignore: {}
4+
# patches apply the minimum changes required to fix a vulnerability
5+
patch:
6+
SNYK-JS-HTTPSPROXYAGENT-469131:
7+
- lerna > @lerna/publish > @evocateur/pacote > make-fetch-happen > https-proxy-agent:
8+
patched: '2019-10-06T02:44:46.366Z'
9+
- lerna > @lerna/publish > @lerna/npm-dist-tag > @evocateur/npm-registry-fetch > make-fetch-happen > https-proxy-agent:
10+
patched: '2019-10-06T02:44:46.366Z'
11+
- lerna > @lerna/publish > @lerna/npm-publish > @evocateur/libnpmpublish > @evocateur/npm-registry-fetch > make-fetch-happen > https-proxy-agent:
12+
patched: '2019-10-06T02:44:46.366Z'

package.json

Lines changed: 8 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -47,9 +47,15 @@
4747
"underscore": "latest"
4848
},
4949
"dependencies": {
50-
"lerna": "^3.16.2"
50+
"lerna": "^3.16.2",
51+
"snyk": "^1.231.0"
5152
},
5253
"engines": {
5354
"node": ">=10.16.0"
54-
}
55+
},
56+
"scripts": {
57+
"snyk-protect": "snyk protect",
58+
"prepublish": "npm run snyk-protect"
59+
},
60+
"snyk": true
5561
}

0 commit comments

Comments
 (0)