From a00211d6142d3d6b9d812b17adc153b357f9a660 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 18 Apr 2018 02:16:36 +0000 Subject: [PATCH] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/npm:fresh:20170908 - https://snyk.io/vuln/npm:clean-css:20180306 - https://snyk.io/vuln/npm:debug:20170905 - https://snyk.io/vuln/npm:mime:20170907 - https://snyk.io/vuln/npm:ms:20170412 - https://snyk.io/vuln/npm:ws:20171108 - https://snyk.io/vuln/npm:ws:20160920 The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:semver:20150403 Latest report for skycoin/skycoin-mobilewallet: https://snyk.io/test/github/skycoin/skycoin-mobilewallet --- .snyk | 8 ++++++++ package.json | 12 ++++++++---- 2 files changed, 16 insertions(+), 4 deletions(-) create mode 100644 .snyk diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..b96ca6c --- /dev/null +++ b/.snyk @@ -0,0 +1,8 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.10.2 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:semver:20150403': + - '@ionic/app-scripts > rollup-plugin-node-builtins > browserify-fs > levelup > semver': + patched: '2018-04-18T02:16:36.565Z' diff --git a/package.json b/package.json index 7f004ab..aed2666 100644 --- a/package.json +++ b/package.json @@ -10,7 +10,9 @@ "lint": "ionic-app-scripts lint", "ionic:build": "ionic-app-scripts build", "ionic:serve": "ionic-app-scripts serve", - "precommit": "npm run lint" + "precommit": "npm run lint", + "snyk-protect": "snyk protect", + "prepare": "npm run snyk-protect" }, "dependencies": { "@angular/common": "4.1.3", @@ -50,10 +52,11 @@ "phonegap-plugin-barcodescanner": "^7.0.2", "rxjs": "5.4.0", "sw-toolbox": "3.6.0", - "zone.js": "0.8.12" + "zone.js": "0.8.12", + "snyk": "^1.71.0" }, "devDependencies": { - "@ionic/app-scripts": "^1.3.12", + "@ionic/app-scripts": "^3.1.0", "husky": "^0.14.3", "tslint-config-prettier": "^1.6.0", "typescript": "2.3.4" @@ -77,5 +80,6 @@ "platforms": [ "android" ] - } + }, + "snyk": true } \ No newline at end of file