Skip to content

Commit ed23aad

Browse files
author
snyk-test
committed
fix: .snyk & package.json to reduce vulnerabilities
The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-450202
1 parent 84c67d4 commit ed23aad

File tree

2 files changed

+20
-6
lines changed

2 files changed

+20
-6
lines changed

.snyk

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,10 @@
1+
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
2+
version: v1.13.5
3+
ignore: {}
4+
# patches apply the minimum changes required to fix a vulnerability
5+
patch:
6+
SNYK-JS-LODASH-450202:
7+
- winston > async > lodash:
8+
patched: '2019-07-04T01:41:56.163Z'
9+
- hapi-swagger > handlebars > async > lodash:
10+
patched: '2019-07-04T01:41:56.163Z'

package.json

Lines changed: 10 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -8,9 +8,9 @@
88
"license": "MIT",
99
"name": "typescript-hapi-starter",
1010
"version": "1.0.0",
11-
"engines" : {
12-
"node" : ">=10.0"
13-
},
11+
"engines": {
12+
"node": ">=10.0"
13+
},
1414
"scripts": {
1515
"build-ts": "tsc",
1616
"start": "node dist/src/index.js",
@@ -23,7 +23,9 @@
2323
"format:lint": "./node_modules/.bin/tslint -c tslint.json 'src/**/*.ts'",
2424
"format:prettier": "./node_modules/.bin/prettier --tab-width 4 --print-width 120 --single-quote --trailing-comma all --write 'src/**/*.ts'",
2525
"postinstall": "npm run build-ts",
26-
"test": "NODE_ENV=test nyc --reporter=lcov --require ts-node/register tape test/**/*.spec.{ts,js} | tap-spec"
26+
"test": "NODE_ENV=test nyc --reporter=lcov --require ts-node/register tape test/**/*.spec.{ts,js} | tap-spec",
27+
"snyk-protect": "snyk protect",
28+
"prepublish": "npm run snyk-protect"
2729
},
2830
"nyc": {
2931
"include": [
@@ -50,7 +52,8 @@
5052
"nedb": "^1.8.0",
5153
"vision": "^5.4.4",
5254
"winston": "^3.1.0",
53-
"dotenv": "^6.2.0"
55+
"dotenv": "^6.2.0",
56+
"snyk": "^1.189.0"
5457
},
5558
"devDependencies": {
5659
"nodemon": "^1.11.0",
@@ -68,5 +71,6 @@
6871
"hapi",
6972
"typescript",
7073
"swagger"
71-
]
74+
],
75+
"snyk": true
7276
}

0 commit comments

Comments
 (0)