From e78a161ae98ab488553b15482868788e67863b9b Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 30 Apr 2020 23:19:02 +0100 Subject: [PATCH 1/2] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- package.json | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/package.json b/package.json index 14daf29..1e79a84 100644 --- a/package.json +++ b/package.json @@ -18,7 +18,9 @@ "package": "cross-env NODE_ENV=production node -r babel-register package.js", "package-all": "npm run package -- --all", "postinstall": "node node_modules/fbjs-scripts/node/check-dev-engines.js package.json", - "dev": "concurrently --kill-others \"npm run hot-server\" \"npm run start-hot\"" + "dev": "concurrently --kill-others \"npm run hot-server\" \"npm run start-hot\"", + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" }, "bin": { "electron": "./node_modules/.bin/electron" @@ -110,10 +112,12 @@ "react-dom": "^15.3.0", "react-input-range": "^0.9.1", "react-sortable": "^1.0.3", - "source-map-support": "^0.4.2" + "source-map-support": "^0.4.2", + "snyk": "^1.316.1" }, "devEngines": { "node": "4.x || 5.x || 6.x", "npm": "2.x || 3.x" - } + }, + "snyk": true } From cc6518d230beacea0d0114c7cdd0ce32d3ad9ba4 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 30 Apr 2020 23:19:03 +0100 Subject: [PATCH 2/2] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- .snyk | 8 ++++++++ 1 file changed, 8 insertions(+) create mode 100644 .snyk diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..d2dcbf6 --- /dev/null +++ b/.snyk @@ -0,0 +1,8 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.14.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - css-modules-require-hook > lodash: + patched: '2020-04-30T22:18:53.429Z'