diff --git a/.snyk b/.snyk index 1d05d8d..d7719fc 100644 --- a/.snyk +++ b/.snyk @@ -1,4 +1,14 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.7.1 +version: v1.14.1 ignore: {} -patch: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - lodash: + patched: '2020-05-01T05:14:19.895Z' + - react-redux > lodash: + patched: '2020-05-01T05:14:19.895Z' + - redux > lodash: + patched: '2020-05-01T05:14:19.895Z' + - redux-form > lodash: + patched: '2020-05-01T05:14:19.895Z' diff --git a/package.json b/package.json index 3676d77..1c5ab3d 100644 --- a/package.json +++ b/package.json @@ -48,7 +48,8 @@ "react-tap-event-plugin": "^2.0.1", "redux": "^3.6.0", "redux-form": "^6.6.3", - "redux-thunk": "^2.2.0" + "redux-thunk": "^2.2.0", + "snyk": "^1.316.1" }, "devDependencies": { "concurrently": "^3.4.0", @@ -60,7 +61,6 @@ "eslint-plugin-import": "^2.6.0", "eslint-plugin-react": "^7.1.0", "react-scripts": "1.0.10", - "snyk": "^1.36.2", "wait-on": "^2.0.2", "why-did-you-update": "0.0.8" }, @@ -72,6 +72,9 @@ "eject": "react-scripts eject", "electron-dev": "concurrently \"BROWSER=none yarn start\" \"wait-on http://localhost:3000 && electron .\"", "electron-pack": "build --em.main=build/electron.js", - "preelectron-pack": "yarn build" - } + "preelectron-pack": "yarn build", + "snyk-protect": "snyk protect", + "prepare": "yarn run snyk-protect" + }, + "snyk": true }