From 50c48c413744979175bf71babe4065a9f876c257 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sun, 19 May 2024 06:05:38 +0000 Subject: [PATCH] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:lodash:20180130 --- .snyk | 7 ++++++- package.json | 4 ++-- 2 files changed, 8 insertions(+), 3 deletions(-) diff --git a/.snyk b/.snyk index d003b80..ec5b267 100644 --- a/.snyk +++ b/.snyk @@ -1,5 +1,5 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.7.1 +version: v1.25.1 # ignores vulnerabilities until expiry date; change duration by modifying expiry date ignore: 'npm:cli:20160615': @@ -38,3 +38,8 @@ patch: 'npm:debug:20170905': - mocha > debug: patched: '2017-09-27T11:07:40.103Z' + 'npm:lodash:20180130': + - cli-table2 > lodash: + patched: '2024-05-19T06:05:36.862Z' + id: 'npm:lodash:20180130' + path: cli-table2 > lodash diff --git a/package.json b/package.json index 0c31b23..e28fd8a 100644 --- a/package.json +++ b/package.json @@ -15,7 +15,7 @@ "preversion": "npm run lint", "changelog": "rm CHANGELOG.md && changelog https://github.com/sebs/capcoin all > CHANGELOG.md && git add . && git commit . -m changelog", "postversion": "git push && git push --tags && npm run changelog && git push ", - "snyk-protect": "snyk protect", + "snyk-protect": "snyk-protect", "prepublish": "npm run snyk-protect" }, "repository": { @@ -54,7 +54,7 @@ "mocha": "^3.2.0", "restify-clients": "^1.5.0", "socket.io-client": "^2.0.3", - "snyk": "^1.41.1" + "@snyk/protect": "latest" }, "snyk": true }