fix: .snyk & package.json to reduce vulnerabilities

The following vulnerabilities are fixed with a Snyk patch:
- https://snyk.io/vuln/SNYK-JS-LODASH-450202
pull/605/head
snyk-test 5 years ago
parent cb9c1b8e8a
commit f9ecd3007a

@ -0,0 +1,8 @@
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
version: v1.13.5
ignore: {}
# patches apply the minimum changes required to fix a vulnerability
patch:
SNYK-JS-LODASH-450202:
- html-webpack-plugin > lodash:
patched: '2019-08-20T01:46:32.656Z'

@ -29,7 +29,9 @@
"test-integration:test": "npx cypress run",
"test-integration:gitlab": "npx cypress run -c baseUrl=https://localhost:8080/#/ --browser chromium",
"server:beta": "node ./server/index.js --buildType=beta",
"server:stable": "node ./server/index.js --buildType=stable"
"server:stable": "node ./server/index.js --buildType=stable",
"snyk-protect": "snyk protect",
"prepublish": "npm run snyk-protect"
},
"dependencies": {
"@babel/polyfill": "^7.2.5",
@ -89,7 +91,8 @@
"webpack-build-notifier": "^0.1.30",
"webpack-bundle-analyzer": "^3.3.2",
"whatwg-fetch": "^3.0.0",
"yarn-run-all": "^3.1.1"
"yarn-run-all": "^3.1.1",
"snyk": "^1.217.1"
},
"devDependencies": {
"@babel/cli": "^7.2.3",
@ -141,5 +144,6 @@
},
"optionalDependencies": {
"fsevents": "1.2.7"
}
},
"snyk": true
}

Loading…
Cancel
Save