From 21c205a2677544c94d8b5c991af1a5cd62d55961 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 1 May 2020 07:14:21 +0200 Subject: [PATCH 1/2] fix: .snyk & package.json to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- .snyk | 14 ++++++++++++-- 1 file changed, 12 insertions(+), 2 deletions(-) diff --git a/.snyk b/.snyk index 1d05d8d..d7719fc 100644 --- a/.snyk +++ b/.snyk @@ -1,4 +1,14 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.7.1 +version: v1.14.1 ignore: {} -patch: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - lodash: + patched: '2020-05-01T05:14:19.895Z' + - react-redux > lodash: + patched: '2020-05-01T05:14:19.895Z' + - redux > lodash: + patched: '2020-05-01T05:14:19.895Z' + - redux-form > lodash: + patched: '2020-05-01T05:14:19.895Z' From 57ad64e336c9df8c651a054ba6c91660378c4ac2 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 1 May 2020 07:14:22 +0200 Subject: [PATCH 2/2] fix: .snyk & package.json to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- package.json | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) diff --git a/package.json b/package.json index 3676d77..1c5ab3d 100644 --- a/package.json +++ b/package.json @@ -48,7 +48,8 @@ "react-tap-event-plugin": "^2.0.1", "redux": "^3.6.0", "redux-form": "^6.6.3", - "redux-thunk": "^2.2.0" + "redux-thunk": "^2.2.0", + "snyk": "^1.316.1" }, "devDependencies": { "concurrently": "^3.4.0", @@ -60,7 +61,6 @@ "eslint-plugin-import": "^2.6.0", "eslint-plugin-react": "^7.1.0", "react-scripts": "1.0.10", - "snyk": "^1.36.2", "wait-on": "^2.0.2", "why-did-you-update": "0.0.8" }, @@ -72,6 +72,9 @@ "eject": "react-scripts eject", "electron-dev": "concurrently \"BROWSER=none yarn start\" \"wait-on http://localhost:3000 && electron .\"", "electron-pack": "build --em.main=build/electron.js", - "preelectron-pack": "yarn build" - } + "preelectron-pack": "yarn build", + "snyk-protect": "snyk protect", + "prepare": "yarn run snyk-protect" + }, + "snyk": true }