From 249bc5326132f3766f7f7c343c3ede03695a0160 Mon Sep 17 00:00:00 2001 From: Snyk bot Date: Fri, 22 Jun 2018 12:18:11 +0100 Subject: [PATCH] fix: .snyk & package.json to reduce vulnerabilities (#964) The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:hoek:20180212 --- .snyk | 23 ++++++++++++++++++++++- package.json | 5 +++-- 2 files changed, 25 insertions(+), 3 deletions(-) diff --git a/.snyk b/.snyk index fa3f3d47f..50924cd20 100644 --- a/.snyk +++ b/.snyk @@ -1,5 +1,5 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.8.0 +version: v1.12.0 # ignores vulnerabilities until expiry date; change duration by modifying expiry date ignore: 'npm:ms:20170412': @@ -165,3 +165,24 @@ patch: 'npm:ms:20170412': - compression > debug > ms: patched: '2017-06-15T00:24:13.837Z' + 'npm:hoek:20180212': + - passport-jwt > jsonwebtoken > joi > hoek: + patched: '2018-06-21T03:00:42.060Z' + - passport-jwt > jsonwebtoken > joi > topo > hoek: + patched: '2018-06-21T03:00:42.060Z' + - node-sass > request > hawk > hoek: + patched: '2018-06-21T03:00:42.060Z' + - node-sass > request > hawk > boom > hoek: + patched: '2018-06-21T03:00:42.060Z' + - node-sass > request > hawk > sntp > hoek: + patched: '2018-06-21T03:00:42.060Z' + - node-sass > request > hawk > cryptiles > boom > hoek: + patched: '2018-06-21T03:00:42.060Z' + - node-sass > node-gyp > request > hawk > hoek: + patched: '2018-06-21T03:00:42.060Z' + - node-sass > node-gyp > request > hawk > boom > hoek: + patched: '2018-06-21T03:00:42.060Z' + - node-sass > node-gyp > request > hawk > sntp > hoek: + patched: '2018-06-21T03:00:42.060Z' + - node-sass > node-gyp > request > hawk > cryptiles > boom > hoek: + patched: '2018-06-21T03:00:42.060Z' diff --git a/package.json b/package.json index 51f8aba22..211dd2e41 100644 --- a/package.json +++ b/package.json @@ -34,7 +34,8 @@ "prepublish": "npm run snyk-protect", "newDevDB": "npm run createdb; knex migrate:latest; npm run seed", "hot": "browser-sync start --proxy 'http://localhost:3000/' --files 'views' 'public'", - "//hot": "echo npm run hot - will open a hot reload browser updating on changes in view & public folders" + "//hot": "echo npm run hot - will open a hot reload browser updating on changes in view & public folders", + "prepare": "npm run snyk-protect" }, "dependencies": { "archiver": "^2.1.1", @@ -93,7 +94,7 @@ "request": "^2.74.0", "requirejs": "^2.3.2", "serve-favicon": "~2.4.3", - "snyk": "^1.53.0", + "snyk": "^1.83.0", "sprintf-js": "1.0.3", "superagent": "^3.5.0", "webpack": "^2.2.0",