Skip to content

Commit

Permalink
fix: .snyk & package.json to reduce vulnerabilities (#964)
Browse files Browse the repository at this point in the history
The following vulnerabilities are fixed with a Snyk patch:
- https://snyk.io/vuln/npm:hoek:20180212
  • Loading branch information
snyk-bot authored and amotenko committed Jun 22, 2018
1 parent 0c26000 commit 249bc53
Show file tree
Hide file tree
Showing 2 changed files with 25 additions and 3 deletions.
23 changes: 22 additions & 1 deletion .snyk
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
version: v1.8.0
version: v1.12.0
# ignores vulnerabilities until expiry date; change duration by modifying expiry date
ignore:
'npm:ms:20170412':
Expand Down Expand Up @@ -165,3 +165,24 @@ patch:
'npm:ms:20170412':
- compression > debug > ms:
patched: '2017-06-15T00:24:13.837Z'
'npm:hoek:20180212':
- passport-jwt > jsonwebtoken > joi > hoek:
patched: '2018-06-21T03:00:42.060Z'
- passport-jwt > jsonwebtoken > joi > topo > hoek:
patched: '2018-06-21T03:00:42.060Z'
- node-sass > request > hawk > hoek:
patched: '2018-06-21T03:00:42.060Z'
- node-sass > request > hawk > boom > hoek:
patched: '2018-06-21T03:00:42.060Z'
- node-sass > request > hawk > sntp > hoek:
patched: '2018-06-21T03:00:42.060Z'
- node-sass > request > hawk > cryptiles > boom > hoek:
patched: '2018-06-21T03:00:42.060Z'
- node-sass > node-gyp > request > hawk > hoek:
patched: '2018-06-21T03:00:42.060Z'
- node-sass > node-gyp > request > hawk > boom > hoek:
patched: '2018-06-21T03:00:42.060Z'
- node-sass > node-gyp > request > hawk > sntp > hoek:
patched: '2018-06-21T03:00:42.060Z'
- node-sass > node-gyp > request > hawk > cryptiles > boom > hoek:
patched: '2018-06-21T03:00:42.060Z'
5 changes: 3 additions & 2 deletions package.json
Original file line number Diff line number Diff line change
Expand Up @@ -34,7 +34,8 @@
"prepublish": "npm run snyk-protect",
"newDevDB": "npm run createdb; knex migrate:latest; npm run seed",
"hot": "browser-sync start --proxy 'http://localhost:3000/' --files 'views' 'public'",
"//hot": "echo npm run hot - will open a hot reload browser updating on changes in view & public folders"
"//hot": "echo npm run hot - will open a hot reload browser updating on changes in view & public folders",
"prepare": "npm run snyk-protect"
},
"dependencies": {
"archiver": "^2.1.1",
Expand Down Expand Up @@ -93,7 +94,7 @@
"request": "^2.74.0",
"requirejs": "^2.3.2",
"serve-favicon": "~2.4.3",
"snyk": "^1.53.0",
"snyk": "^1.83.0",
"sprintf-js": "1.0.3",
"superagent": "^3.5.0",
"webpack": "^2.2.0",
Expand Down

0 comments on commit 249bc53

Please sign in to comment.