From 49b6bf8b54006dc6ce71f040445a40287ba238d2 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sun, 6 Oct 2019 03:08:02 +0000 Subject: [PATCH] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-HTTPSPROXYAGENT-469131 --- .snyk | 10 ++++++++++ package.json | 16 +++++++++++++--- 2 files changed, 23 insertions(+), 3 deletions(-) create mode 100644 .snyk diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..5fecd54 --- /dev/null +++ b/.snyk @@ -0,0 +1,10 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.13.5 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-HTTPSPROXYAGENT-469131: + - weibo > urllib > proxy-agent > https-proxy-agent: + patched: '2019-10-06T03:08:00.628Z' + - weibo > urllib > proxy-agent > pac-proxy-agent > https-proxy-agent: + patched: '2019-10-06T03:08:00.628Z' diff --git a/package.json b/package.json index 66f5211..7899ad6 100644 --- a/package.json +++ b/package.json @@ -4,7 +4,8 @@ "main": "src/index.html", "dependencies": { "moment": ">=1.7.0", - "weibo": ">=0.6.6" + "weibo": ">=0.6.6", + "snyk": "^1.231.0" }, "window": { "icon": "src/icons/icon128.png", @@ -20,12 +21,21 @@ "webgl-disabled": true }, "maintainers": [ - { "name": "fengmk2", "email": "fengmk2@gmail.com", "web": "http://fengmk2.github.com" } + { + "name": "fengmk2", + "email": "fengmk2@gmail.com", + "web": "http://fengmk2.github.com" + } ], "repository": { "type": "git", "url": "git://github.com/fengmk2/fawave_desktop.git" }, "bugs": "https://github.com/fengmk2/fawave_desktop/issues", - "license": "MIT" + "license": "MIT", + "scripts": { + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" + }, + "snyk": true }