Skip to content

Commit 37b3cf9

Browse files
author
snyk-test
committed
fix: .snyk & package.json to reduce vulnerabilities
The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-450202
1 parent a026f75 commit 37b3cf9

2 files changed

Lines changed: 57 additions & 3 deletions

File tree

.snyk

Lines changed: 50 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,50 @@
1+
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
2+
version: v1.13.5
3+
ignore: {}
4+
# patches apply the minimum changes required to fix a vulnerability
5+
patch:
6+
SNYK-JS-LODASH-450202:
7+
- next > styled-jsx > babel-types > lodash:
8+
patched: '2019-07-04T00:32:32.315Z'
9+
- lodash:
10+
patched: '2019-07-04T00:32:32.315Z'
11+
- mongoose > async > lodash:
12+
patched: '2019-07-04T00:32:32.315Z'
13+
- pm2 > async > lodash:
14+
patched: '2019-07-04T00:32:32.315Z'
15+
- next > write-file-webpack-plugin > lodash:
16+
patched: '2019-07-04T00:32:32.315Z'
17+
- next > webpackbar > lodash:
18+
patched: '2019-07-04T00:32:32.315Z'
19+
- next > autodll-webpack-plugin > lodash:
20+
patched: '2019-07-04T00:32:32.315Z'
21+
- next > @babel/core > lodash:
22+
patched: '2019-07-04T00:32:32.315Z'
23+
- pm2 > @pm2/js-api > async > lodash:
24+
patched: '2019-07-04T00:32:32.315Z'
25+
- next > webpackbar > table > lodash:
26+
patched: '2019-07-04T00:32:32.315Z'
27+
- next > webpackbar > consola > lodash:
28+
patched: '2019-07-04T00:32:32.315Z'
29+
- cloudinary > lodash:
30+
patched: '2019-07-04T00:32:32.315Z'
31+
- next > autodll-webpack-plugin > webpack-merge > lodash:
32+
patched: '2019-07-04T00:32:32.315Z'
33+
- next > @babel/core > @babel/types > lodash:
34+
patched: '2019-07-04T00:32:32.315Z'
35+
- pm2 > pm2-deploy > async > lodash:
36+
patched: '2019-07-04T00:32:32.315Z'
37+
- pm2 > vizion > async > lodash:
38+
patched: '2019-07-04T00:32:32.315Z'
39+
- next > @babel/plugin-transform-runtime > @babel/helper-module-imports > @babel/types > lodash:
40+
patched: '2019-07-04T00:32:32.315Z'
41+
- next > @babel/preset-env > @babel/plugin-transform-async-to-generator > @babel/helper-module-imports > @babel/types > lodash:
42+
patched: '2019-07-04T00:32:32.315Z'
43+
- next > @babel/preset-env > @babel/plugin-proposal-async-generator-functions > @babel/helper-remap-async-to-generator > @babel/helper-annotate-as-pure > @babel/types > lodash:
44+
patched: '2019-07-04T00:32:32.315Z'
45+
- next > @babel/plugin-proposal-class-properties > @babel/helper-replace-supers > @babel/traverse > @babel/helper-function-name > @babel/template > @babel/types > lodash:
46+
patched: '2019-07-04T00:32:32.315Z'
47+
- next > @babel/preset-env > @babel/plugin-transform-async-to-generator > @babel/helper-remap-async-to-generator > @babel/helper-wrap-function > @babel/helper-function-name > @babel/template > @babel/types > lodash:
48+
patched: '2019-07-04T00:32:32.315Z'
49+
- next > @babel/preset-env > @babel/plugin-proposal-async-generator-functions > @babel/helper-remap-async-to-generator > @babel/helper-wrap-function > @babel/traverse > @babel/helper-function-name > @babel/helper-get-function-arity > @babel/types > lodash:
50+
patched: '2019-07-04T00:32:32.315Z'

package.json

Lines changed: 7 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,9 @@
77
"dev": "node server.js -p $PORT",
88
"build": "next build",
99
"heroku-postbuild": "next build",
10-
"start": "pm2-runtime start ecosystem.config.js --env production"
10+
"start": "pm2-runtime start ecosystem.config.js --env production",
11+
"snyk-protect": "snyk protect",
12+
"prepublish": "npm run snyk-protect"
1113
},
1214
"repository": {
1315
"type": "git",
@@ -43,9 +45,11 @@
4345
"react-stripe-checkout": "^2.6.3",
4446
"react-toastify": "^4.1.0",
4547
"request": "^2.87.0",
46-
"stripe": "^6.1.1"
48+
"stripe": "^6.1.1",
49+
"snyk": "^1.189.0"
4750
},
4851
"engines": {
4952
"node": "6.11.x"
50-
}
53+
},
54+
"snyk": true
5155
}

0 commit comments

Comments
 (0)