From bf947da9e9f39cc7a080ad773380503462a5957d Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 26 May 2017 02:19:07 +0000 Subject: [PATCH] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/npm:ms:20170412 - https://snyk.io/vuln/npm:ms:20170412 - https://snyk.io/vuln/npm:ms:20170412 - https://snyk.io/vuln/npm:ms:20170412 The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:ms:20170412 Latest report for telefonicaid/fiware-aiakos: https://snyk.io/test/github/telefonicaid/fiware-aiakos --- .snyk | 8 ++++++++ package.json | 18 +++++++++++------- 2 files changed, 19 insertions(+), 7 deletions(-) create mode 100644 .snyk diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..39d2180 --- /dev/null +++ b/.snyk @@ -0,0 +1,8 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.7.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:ms:20170412': + - domain > eventstore > debug > ms: + patched: '2017-05-26T02:19:07.004Z' diff --git a/package.json b/package.json index 7de8a2d..f20bd4a 100644 --- a/package.json +++ b/package.json @@ -4,16 +4,18 @@ "private": true, "scripts": { "start": "node ./bin/www", - "test": "grunt test" + "test": "grunt test", + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" }, "dependencies": { "assert": "^1.3.0", - "body-parser": "~1.13.2", + "body-parser": "~1.17.2", "cookie-parser": "~1.3.5", "cuid": "^1.3.8", - "debug": "~2.2.0", + "debug": "~2.6.7", "domain": "0.0.1", - "express": "~4.13.1", + "express": "~4.15.3", "express-domain-middleware": "^0.1.0", "forever": "^0.15.1", "fs": "0.0.2", @@ -22,8 +24,9 @@ "js-yaml": "^3.4.6", "logops": "^1.0.0-alpha.3", "optimist": "^0.6.1", - "serve-favicon": "~2.3.0", - "util": "^0.10.3" + "serve-favicon": "~2.4.3", + "util": "^0.10.3", + "snyk": "^1.30.1" }, "devDependencies": { "closure-linter-wrapper": "^0.2.11", @@ -44,5 +47,6 @@ "mocha": "^2.2.4", "sinon": "^1.17.2", "xunit-file": "^0.0.9" - } + }, + "snyk": true }