Merge pull request #2 from soenkekluth/snyk-fix-77387e76

[Snyk] Fix for 4 vulnerable dependency paths

Author: soenkekluth

.snyk

@@ -0,0 +1,10 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.10.1
+ignore: {}
+# patches apply the minimum changes required to fix a vulnerability
+patch:
+  'npm:marked:20170907':
+    - esdoc > marked:
+        patched: '2018-01-24T16:26:38.614Z'
+    - esdoc-standard-plugin > esdoc-publish-html-plugin > marked:
+        patched: '2018-01-24T16:26:38.614Z'

package.json

@@ -19,7 +19,9 @@
     "--minify:umd": "uglifyjs dist/nextframe.common.js -cm -o dist/nextframe.common.js -p relative --in-source-map dist/nextframe.common.js.map --source-map dist/nextframe.common.js.map",
     "size": "echo \"Gzipped Size: $(strip-json-comments --no-whitespace dist/nextframe.js | gzip-size)\"",
     "release": "yarn run build -s && yarn run bump && git push --follow-tags origin master && npm publish",
-    "test": "yarn build && ava -v"
+    "test": "yarn build && ava -v",
+    "snyk-protect": "snyk protect",
+    "prepublish": "npm run snyk-protect"
   },
   "files": [
     "dist",
@@ -54,7 +56,8 @@
     "esdoc": "^1.0.3",
     "esdoc-standard-plugin": "^1.0.0",
     "raf": "^3.4.0",
-    "setimmediate": "^1.0.5"
+    "setimmediate": "^1.0.5",
+    "snyk": "^*"
   },
   "peerDependencies": {
     "raf": "3.4.0"
@@ -96,5 +99,6 @@
     "serve": "^6.2.0",
     "standard-version": "^4.2.0",
     "strip-json-comments-cli": "^1.0.1"
-  }
+  },
+  "snyk": true
 }