From 88986091b42c12c264fd49c6489fe97034695c6b Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 5 Oct 2022 22:06:04 +0000 Subject: [PATCH] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-ANSIREGEX-1583908 - https://snyk.io/vuln/SNYK-JS-DECOMPRESS-557358 - https://snyk.io/vuln/SNYK-JS-GOT-2932019 - https://snyk.io/vuln/SNYK-JS-LODASH-1018905 - https://snyk.io/vuln/SNYK-JS-LODASH-1040724 - https://snyk.io/vuln/SNYK-JS-LODASH-450202 - https://snyk.io/vuln/SNYK-JS-LODASH-567746 - https://snyk.io/vuln/SNYK-JS-LODASH-608086 - https://snyk.io/vuln/SNYK-JS-LODASH-73638 - https://snyk.io/vuln/SNYK-JS-LODASH-73639 - https://snyk.io/vuln/SNYK-JS-MINIMATCH-1019388 - https://snyk.io/vuln/SNYK-JS-SHELLJS-2332187 - https://snyk.io/vuln/SNYK-JS-TRIMNEWLINES-1298042 - https://snyk.io/vuln/npm:lodash:20180130 - https://snyk.io/vuln/npm:minimatch:20160620 - https://snyk.io/vuln/npm:tunnel-agent:20170305 The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:lodash:20180130 --- .snyk | 10 ++++++++++ package.json | 14 +++++++++----- 2 files changed, 19 insertions(+), 5 deletions(-) create mode 100644 .snyk diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..36d8f9f --- /dev/null +++ b/.snyk @@ -0,0 +1,10 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.25.0 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:lodash:20180130': + - html-wiring > cheerio > lodash: + patched: '2022-10-05T22:06:01.493Z' + - yeoman-generator > html-wiring > cheerio > lodash: + patched: '2022-10-05T22:06:01.493Z' diff --git a/package.json b/package.json index 2e3fd62..c7c0f17 100644 --- a/package.json +++ b/package.json @@ -21,13 +21,16 @@ "url": "https://github.com/nahidf/code-generator.git" }, "scripts": { - "test": "mocha" + "test": "mocha", + "prepublish": "npm run snyk-protect", + "snyk-protect": "snyk-protect" }, "dependencies": { - "yeoman-generator": "^0.19.0", - "chalk": "^1.0.0", + "yeoman-generator": "^5.0.0", + "chalk": "^2.0.0", "html-wiring": "^1.1.0", - "yosay": "^1.0.0" + "yosay": "^2.0.0", + "@snyk/protect": "latest" }, "devDependencies": { "mocha": "~1.14.0" @@ -43,5 +46,6 @@ { "type": "MIT" } - ] + ], + "snyk": true }