From aed4d3b69810683e34c806b3548677a40e254331 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 4 Sep 2021 04:51:40 +0000 Subject: [PATCH] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:debug:20170905 - https://snyk.io/vuln/npm:ms:20170412 --- .snyk | 11 +++++++++++ package.json | 10 +++++++--- 2 files changed, 18 insertions(+), 3 deletions(-) create mode 100644 .snyk mode change 100755 => 100644 package.json diff --git a/.snyk b/.snyk new file mode 100644 index 00000000..523c5736 --- /dev/null +++ b/.snyk @@ -0,0 +1,11 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.21.5 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:debug:20170905': + - sails > @sailshq/express > @sailshq/connect > morgan > debug: + patched: '2021-09-04T04:51:38.657Z' + 'npm:ms:20170412': + - sails > @sailshq/express > @sailshq/connect > morgan > debug > ms: + patched: '2021-09-04T04:51:38.657Z' diff --git a/package.json b/package.json old mode 100755 new mode 100644 index a26a7095..0d74cbae --- a/package.json +++ b/package.json @@ -29,11 +29,14 @@ "sails": "github:lifespent/sails#hastings-fix", "sails-db-migrate": "^1.5.0", "sails-disk": "~0.10.9", - "sails-mysql": "^0.11.5" + "sails-mysql": "^0.11.5", + "@snyk/protect": "latest" }, "scripts": { "debug": "node debug app.js", - "start": "node app.js" + "start": "node app.js", + "prepublish": "npm run snyk-protect", + "snyk-protect": "snyk-protect" }, "main": "app.js", "repository": { @@ -41,5 +44,6 @@ "url": "ssh://git@github.com:PolarisAlpha/firewalled-jenkins.git" }, "author": "Polaris Alpha", - "license": "MIT" + "license": "MIT", + "snyk": true }