From f66cc72d883a450625c93e3dbc80577efbf44c7c Mon Sep 17 00:00:00 2001 From: snyk-test Date: Wed, 3 Jul 2019 22:09:51 +0000 Subject: [PATCH] fix: .snyk & package.json to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-450202 --- .snyk | 8 ++++++++ package.json | 12 ++++++++---- 2 files changed, 16 insertions(+), 4 deletions(-) create mode 100644 .snyk diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..0aa2b6a --- /dev/null +++ b/.snyk @@ -0,0 +1,8 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.13.5 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-450202: + - winston > async > lodash: + patched: '2019-07-03T22:09:49.169Z' diff --git a/package.json b/package.json index 9547296..58feb93 100644 --- a/package.json +++ b/package.json @@ -3,12 +3,16 @@ "description": "node room", "main": "server.js", "scripts": { - "start": "node server.js" + "start": "node server.js", + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" }, - "dependencies": { + "dependencies": { "nodejs-websocket": "*", - "winston": "*" + "winston": "*", + "snyk": "^1.189.0" }, "author": "", - "license": "ISC" + "license": "ISC", + "snyk": true }