From ba4930ac246d456a318c92b6ad1fdc425fbc7bc2 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 4 Oct 2019 09:03:11 +0000 Subject: [PATCH] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-HTTPSPROXYAGENT-469131 --- .snyk | 16 ++++++++++++++++ package.json | 10 +++++++--- 2 files changed, 23 insertions(+), 3 deletions(-) create mode 100644 .snyk diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..5aa10e4 --- /dev/null +++ b/.snyk @@ -0,0 +1,16 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.13.5 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-HTTPSPROXYAGENT-469131: + - npm > pacote > make-fetch-happen > https-proxy-agent: + patched: '2019-10-04T09:03:03.816Z' + - npm > npm-profile > make-fetch-happen > https-proxy-agent: + patched: '2019-10-04T09:03:03.816Z' + - npm > npm-registry-fetch > make-fetch-happen > https-proxy-agent: + patched: '2019-10-04T09:03:03.816Z' + - npm > libcipm > pacote > make-fetch-happen > https-proxy-agent: + patched: '2019-10-04T09:03:03.816Z' + - npm > libnpmhook > npm-registry-fetch > make-fetch-happen > https-proxy-agent: + patched: '2019-10-04T09:03:03.816Z' diff --git a/package.json b/package.json index 6450773..c4e37ad 100644 --- a/package.json +++ b/package.json @@ -37,7 +37,8 @@ "tar-fs": "^1.16.3", "ts-node": "^6.2.0", "tslint": "^5.11.0", - "typescript": "^2.9.2" + "typescript": "^2.9.2", + "snyk": "^1.230.5" }, "devDependencies": { "husky": "^0.14.3" @@ -50,7 +51,9 @@ "healthcheck": "ts-node src/healthcheck.ts", "healthcheck-compare-notify": "ts-node healthcheck/compare-and-notify.ts", "testall": "npm run check && npm run tslint && mocha -r ts-node/register src/*/entrance.ts", - "commitmsg": "commitlint -E GIT_PARAMS" + "commitmsg": "commitlint -E GIT_PARAMS", + "snyk-protect": "snyk protect", + "prepare": "npm run snyk-protect" }, "commitlint": { "extends": [ @@ -74,5 +77,6 @@ "bugs": { "url": "https://github.com/wise-team/steem-wise-test/issues" }, - "homepage": "https://wise.vote/" + "homepage": "https://wise.vote/", + "snyk": true }