From 0d0c77b281777d992d1b4695cdc5b894c5748774 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 2 May 2020 04:52:53 +0200 Subject: [PATCH 1/2] fix: .snyk & package.json to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- .snyk | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/.snyk b/.snyk index ad46b76..d4f6ea5 100644 --- a/.snyk +++ b/.snyk @@ -1,3 +1,8 @@ -version: v1.5.2 +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.14.1 ignore: {} -patch: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - trailpack > lodash: + patched: '2020-05-02T02:52:51.642Z' From 7d34d0f776fd093251817d7b0408d8dd75a4250f Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 2 May 2020 04:52:54 +0200 Subject: [PATCH 2/2] fix: .snyk & package.json to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- package.json | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/package.json b/package.json index c96395f..0c00ce1 100644 --- a/package.json +++ b/package.json @@ -21,7 +21,8 @@ "test" ], "dependencies": { - "trailpack": "^2.1.2" + "trailpack": "^2.1.2", + "snyk": "^1.316.2" }, "devDependencies": { "eslint": "^4.0.0", @@ -40,7 +41,9 @@ "trails": "^2.0.2" }, "scripts": { - "test": "eslint --fix . && mocha" + "test": "eslint --fix . && mocha", + "snyk-protect": "snyk protect", + "prepare": "yarn run snyk-protect" }, "engines": { "node": ">= 4.0.0" @@ -49,5 +52,6 @@ "extends": "trails" }, "repository": "https://github.com/mylisabox/trailpack-chatbot", - "license": "MIT" + "license": "MIT", + "snyk": true }