From 8142cc4c810af86da0617c4c084b35ff787e5718 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 2 Sep 2021 19:54:54 +0000 Subject: [PATCH] fix: tooling/package.json & tooling/.snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:lodash:20180130 --- tooling/.snyk | 8 ++++++++ tooling/package.json | 10 +++++++--- 2 files changed, 15 insertions(+), 3 deletions(-) create mode 100644 tooling/.snyk diff --git a/tooling/.snyk b/tooling/.snyk new file mode 100644 index 0000000000..643e5ba5de --- /dev/null +++ b/tooling/.snyk @@ -0,0 +1,8 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.21.5 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:lodash:20180130': + - jscs > jscs-jsdoc > jsdoctypeparser > lodash: + patched: '2021-09-02T19:54:53.359Z' diff --git a/tooling/package.json b/tooling/package.json index b37a856b02..01c7969936 100644 --- a/tooling/package.json +++ b/tooling/package.json @@ -1,9 +1,13 @@ { "private": true, "scripts": { - "lint": "cd .. && jscs" + "lint": "cd .. && jscs", + "prepublish": "npm run snyk-protect", + "snyk-protect": "snyk-protect" }, "dependencies": { - "jscs": "^2.7.0" - } + "jscs": "^2.7.0", + "@snyk/protect": "latest" + }, + "snyk": true }