From 51298051d43444e2b9d0a2cbc55577ab47c3b499 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 1 May 2020 05:23:34 +0100 Subject: [PATCH 1/2] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- package.json | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/package.json b/package.json index 592b873..faeadbc 100644 --- a/package.json +++ b/package.json @@ -28,7 +28,9 @@ "test:watch": "npm run test -- --auto-watch --no-single-run", "test:firefox": "npm run test -- --browsers Firefox", "test:safari": "npm run test -- --browsers Safari", - "test:ie": "npm run test -- --browsers IE" + "test:ie": "npm run test -- --browsers IE", + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" }, "lint-staged": { "*.js": "lint:eslint", @@ -55,7 +57,8 @@ "redux-saga": "0.11.1", "reselect": "2.5.4", "sanitize.css": "4.1.0", - "whatwg-fetch": "1.0.0" + "whatwg-fetch": "1.0.0", + "snyk": "^1.316.1" }, "devDependencies": { "babel-cli": "6.14.0", @@ -122,5 +125,6 @@ "webpack": "2.1.0-beta.22", "webpack-dev-middleware": "1.8.0", "webpack-hot-middleware": "2.12.2" - } + }, + "snyk": true } From 72f2d1b7227a06f9631b5a742b7ab26c69a786e4 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 1 May 2020 05:23:35 +0100 Subject: [PATCH 2/2] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- .snyk | 10 ++++++++++ 1 file changed, 10 insertions(+) create mode 100644 .snyk diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..90d65f8 --- /dev/null +++ b/.snyk @@ -0,0 +1,10 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.14.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - react-redux > lodash: + patched: '2020-05-01T04:23:32.423Z' + - redux > lodash: + patched: '2020-05-01T04:23:32.423Z'