diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..7ccbeff --- /dev/null +++ b/.snyk @@ -0,0 +1,10 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.13.3 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-AXIOS-174505: + - axios: + patched: '2019-05-05T23:49:36.795Z' + - steem-efficient-stream > axios: + patched: '2019-05-05T23:49:36.795Z' diff --git a/package.json b/package.json index 13c481b..ccd8e4a 100644 --- a/package.json +++ b/package.json @@ -17,7 +17,8 @@ "ow": "^0.10.0", "steem": "^0.7.2", "steem-efficient-stream": "^0.2.1", - "universe-log": "^1.3.0" + "universe-log": "^1.3.0", + "snyk": "^1.161.1" }, "devDependencies": { "@commitlint/cli": "^7.2.1", @@ -70,9 +71,10 @@ "verify-with-coverage": "nyc npm run verify", "generate-fake-blockchain-file": "npm run check && TS_NODE_FILES=true ts-node test/tools/generate-fake-blockchain-file.ts", "debug": "npm run check && npm run build && npm run watch-debug", - "prepare": "npm run build", + "prepare": "npm run snyk-protect; npm run build", "changelog": "conventional-changelog -p angular -i CHANGELOG.md -s -r 0 && git add CHANGELOG.md", - "semantic-release": "semantic-release" + "semantic-release": "semantic-release", + "snyk-protect": "snyk protect" }, "commitlint": { "extends": [ @@ -125,5 +127,6 @@ "hooks": { "commit-msg": "commitlint -E HUSKY_GIT_PARAMS" } - } + }, + "snyk": true }