From f94b721ec95b91c2e09d54a5177710881696dbbb Mon Sep 17 00:00:00 2001 From: snyk-test Date: Thu, 4 Jul 2019 03:10:18 +0000 Subject: [PATCH] fix: .snyk & package.json to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-450202 --- .snyk | 12 +++++++++ package.json | 70 +++++++++++++++++++++++++++------------------------- 2 files changed, 49 insertions(+), 33 deletions(-) create mode 100644 .snyk diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..dd771bb --- /dev/null +++ b/.snyk @@ -0,0 +1,12 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.13.5 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-450202: + - styled-components > babel-plugin-styled-components > lodash: + patched: '2019-07-04T03:10:16.720Z' + - styled-components > @babel/helper-module-imports > @babel/types > lodash: + patched: '2019-07-04T03:10:16.720Z' + - styled-components > babel-plugin-styled-components > @babel/helper-annotate-as-pure > @babel/types > lodash: + patched: '2019-07-04T03:10:16.720Z' diff --git a/package.json b/package.json index 0357b10..3699a27 100644 --- a/package.json +++ b/package.json @@ -1,35 +1,39 @@ { - "name": "theming-react", - "version": "1.0.0", - "description": "", - "license": "MIT", - "keywords": [ - "react", - "styled-components", - "theming" - ], - "main": "src/index.jsx", - "dependencies": { - "prop-types": "15.7.2", - "react": "16.8.3", - "react-dom": "16.8.3", - "react-router": "4.3.1", - "react-router-dom": "4.3.1", - "react-scripts": "3.0.0", - "styled-components": "4.1.3", - "styled-theming": "2.2.0" - }, - "devDependencies": {}, - "scripts": { - "start": "react-scripts start", - "build": "react-scripts build", - "test": "react-scripts test --env=jsdom", - "eject": "react-scripts eject" - }, - "browserslist": [ - ">0.2%", - "not dead", - "not ie <= 11", - "not op_mini all" - ] + "name": "theming-react", + "version": "1.0.0", + "description": "", + "license": "MIT", + "keywords": [ + "react", + "styled-components", + "theming" + ], + "main": "src/index.jsx", + "dependencies": { + "prop-types": "15.7.2", + "react": "16.8.3", + "react-dom": "16.8.3", + "react-router": "4.3.1", + "react-router-dom": "4.3.1", + "react-scripts": "3.0.0", + "styled-components": "4.1.3", + "styled-theming": "2.2.0", + "snyk": "^1.189.0" + }, + "devDependencies": {}, + "scripts": { + "start": "react-scripts start", + "build": "react-scripts build", + "test": "react-scripts test --env=jsdom", + "eject": "react-scripts eject", + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" + }, + "browserslist": [ + ">0.2%", + "not dead", + "not ie <= 11", + "not op_mini all" + ], + "snyk": true }