diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..f43c980 --- /dev/null +++ b/.snyk @@ -0,0 +1,8 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.14.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - portfinder > async > lodash: + patched: '2020-05-01T08:36:50.821Z' diff --git a/package.json b/package.json index b84463b..3130fc1 100644 --- a/package.json +++ b/package.json @@ -1,37 +1,43 @@ -{ - "name": "OpenShift-Sample-App", - "version": "1.0.0", - "description": "OpenShift Sample Application", - "keywords": [ - "OpenShift", - "Node.js", - "application", - "openshift" - ], - "author": { - "name": "OpenShift", - "email": "ramr@example.org", - "url": "http://www.openshift.com/" - }, - "homepage": "http://www.openshift.com/", - "repository": { - "type": "git", - "url": "https://github.com/openshift/origin-server" - }, - "engines": { - "node": ">= 0.6.0", - "npm": ">= 1.0.0" - }, - "dependencies": { - "express": ">=3.4.8", - "http-proxy": ">=1.1.2", - "mysql": ">=2.2.0", - "portfinder": ">=0.2.1", - "ws": ">=0.4.31", - "googleplaces": "~0.0.1" - }, - "devDependencies": {}, - "bundleDependencies": [], - "private": true, - "main": "server.js" +{ + "name": "OpenShift-Sample-App", + "version": "1.0.0", + "description": "OpenShift Sample Application", + "keywords": [ + "OpenShift", + "Node.js", + "application", + "openshift" + ], + "author": { + "name": "OpenShift", + "email": "ramr@example.org", + "url": "http://www.openshift.com/" + }, + "homepage": "http://www.openshift.com/", + "repository": { + "type": "git", + "url": "https://github.com/openshift/origin-server" + }, + "engines": { + "node": ">= 0.6.0", + "npm": ">= 1.0.0" + }, + "dependencies": { + "express": ">=3.4.8", + "http-proxy": ">=1.1.2", + "mysql": ">=2.2.0", + "portfinder": ">=0.2.1", + "ws": ">=0.4.31", + "googleplaces": "~0.0.1", + "snyk": "^1.316.1" + }, + "devDependencies": {}, + "bundleDependencies": [], + "private": true, + "main": "server.js", + "scripts": { + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" + }, + "snyk": true }