diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..0c9f7b2 --- /dev/null +++ b/.snyk @@ -0,0 +1,34 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.14.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - '@babel/register > lodash': + patched: '2020-05-01T04:33:11.515Z' + - babel-preset-minify > lodash: + patched: '2020-05-01T04:33:11.515Z' + - eslint > lodash: + patched: '2020-05-01T04:33:11.515Z' + - '@babel/preset-env > @babel/plugin-transform-block-scoping > lodash': + patched: '2020-05-01T04:33:11.515Z' + - babel-preset-minify > babel-plugin-minify-dead-code-elimination > lodash: + patched: '2020-05-01T04:33:11.515Z' + - eslint > inquirer > lodash: + patched: '2020-05-01T04:33:11.515Z' + - eslint > table > lodash: + patched: '2020-05-01T04:33:11.515Z' + - mocha > yargs-unparser > lodash: + patched: '2020-05-01T04:33:11.515Z' + - '@babel/preset-env > @babel/plugin-transform-classes > @babel/helper-define-map > lodash': + patched: '2020-05-01T04:33:11.515Z' + - '@babel/preset-env > @babel/plugin-transform-unicode-regex > @babel/helper-create-regexp-features-plugin > @babel/helper-regex > lodash': + patched: '2020-05-01T04:33:11.515Z' + - '@babel/preset-env > @babel/preset-modules > @babel/plugin-transform-dotall-regex > @babel/helper-create-regexp-features-plugin > @babel/helper-regex > lodash': + patched: '2020-05-01T04:33:11.515Z' + - '@babel/preset-env > @babel/plugin-transform-exponentiation-operator > @babel/helper-builder-binary-assignment-operator-visitor > @babel/helper-explode-assignable-expression > @babel/traverse > @babel/generator > lodash': + patched: '2020-05-01T04:33:11.515Z' + - '@babel/preset-env > @babel/plugin-transform-exponentiation-operator > @babel/helper-builder-binary-assignment-operator-visitor > @babel/helper-explode-assignable-expression > @babel/traverse > @babel/helper-split-export-declaration > @babel/types > lodash': + patched: '2020-05-01T04:33:11.515Z' + - '@babel/preset-env > @babel/plugin-transform-exponentiation-operator > @babel/helper-builder-binary-assignment-operator-visitor > @babel/helper-explode-assignable-expression > @babel/traverse > @babel/helper-function-name > @babel/template > @babel/types > lodash': + patched: '2020-05-01T04:33:11.515Z' diff --git a/package.json b/package.json index d3102c5..058d791 100644 --- a/package.json +++ b/package.json @@ -5,9 +5,15 @@ "main": "dist/index.js", "scripts": { "build": "bash ./build.sh", - "test": "mocha ./test/*.spec.* --require @babel/register --timeout 5000" + "test": "mocha ./test/*.spec.* --require @babel/register --timeout 5000", + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" }, - "directories": ["dist", "bin", "utils"], + "directories": [ + "dist", + "bin", + "utils" + ], "repository": { "type": "git", "url": "git+https://github.com/stackr23/styleobjects.git" @@ -47,6 +53,8 @@ "chalk": "^2.4.1", "css": "2.2.4", "fetch": "^1.1.0", - "yargs": "^13.2.4" - } + "yargs": "^13.2.4", + "snyk": "^1.316.1" + }, + "snyk": true }