From a01663316f860dc5ed42c3ff4806e479c47b32e7 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 10 Feb 2017 14:35:25 +0000 Subject: [PATCH] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:marked:20170112 Latest report for abramz/champion-select: https://snyk.io/test/github/abramz/champion-select --- .snyk | 9 +++++++-- package.json | 9 ++++++--- 2 files changed, 13 insertions(+), 5 deletions(-) diff --git a/.snyk b/.snyk index ad46b76..b13c5f6 100644 --- a/.snyk +++ b/.snyk @@ -1,3 +1,8 @@ -version: v1.5.2 +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.7.0 ignore: {} -patch: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:marked:20170112': + - graphiql > marked: + patched: '2017-02-10T14:35:25.240Z' diff --git a/package.json b/package.json index 86ed51a..a56f009 100644 --- a/package.json +++ b/package.json @@ -38,7 +38,9 @@ "start": "babel-node tools/run start", "snyk:wizard": "snyk wizard", "snyk:protect": "snyk protect", - "snyk:test": "snyk test" + "snyk:test": "snyk test", + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" }, "nyc": { "include": [ @@ -84,7 +86,7 @@ "redux": "^3.5.2", "redux-logger": "^2.6.1", "redux-thunk": "^2.1.0", - "snyk": "^1.19.1", + "snyk": "^1.25.0", "source-map-support": "^0.4.2", "universal-router": "^1.2.2", "validator": "^5.6.0", @@ -167,5 +169,6 @@ "webpack": "^1.13.2", "webpack-hot-middleware": "^2.12.2", "webpack-middleware": "^1.5.1" - } + }, + "snyk": true }