Skip to content

Commit

Permalink
fix: .snyk & package.json to reduce vulnerabilities
Browse files Browse the repository at this point in the history
The following vulnerabilities are fixed with a Snyk patch:
- https://snyk.io/vuln/SNYK-JS-LODASH-450202
  • Loading branch information
snyk-test committed Jul 4, 2019
1 parent e10faa9 commit 52273a6
Show file tree
Hide file tree
Showing 2 changed files with 21 additions and 3 deletions.
14 changes: 14 additions & 0 deletions .snyk
Original file line number Diff line number Diff line change
@@ -0,0 +1,14 @@
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
version: v1.13.5
ignore: {}
# patches apply the minimum changes required to fix a vulnerability
patch:
SNYK-JS-LODASH-450202:
- tap > nyc > istanbul-lib-instrument > @babel/types > lodash:
patched: '2019-07-04T00:02:13.775Z'
- tap > nyc > istanbul-lib-instrument > @babel/traverse > @babel/types > lodash:
patched: '2019-07-04T00:02:13.775Z'
- tap > nyc > istanbul-lib-instrument > @babel/traverse > @babel/helper-split-export-declaration > @babel/types > lodash:
patched: '2019-07-04T00:02:13.775Z'
- tap > nyc > istanbul-lib-instrument > @babel/traverse > @babel/helper-function-name > @babel/template > @babel/types > lodash:
patched: '2019-07-04T00:02:13.775Z'
10 changes: 7 additions & 3 deletions package.json
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,9 @@
"main": "index.js",
"scripts": {
"test": "tap test.js --coverage --100",
"test:coverage": "tap test.js --coverage --100 --coverage-report=html"
"test:coverage": "tap test.js --coverage --100 --coverage-report=html",
"snyk-protect": "snyk protect",
"prepublish": "npm run snyk-protect"
},
"bugs": {
"url": "https://github.com/lolo32/fastify-response-time/issues"
Expand All @@ -29,6 +31,8 @@
"tap": "^12.1.0"
},
"dependencies": {
"fastify-plugin": "^1.3.0"
}
"fastify-plugin": "^1.3.0",
"snyk": "^1.189.0"
},
"snyk": true
}

0 comments on commit 52273a6

Please sign in to comment.