diff --git a/.snyk b/.snyk new file mode 100644 index 000000000..5f9c189d9 --- /dev/null +++ b/.snyk @@ -0,0 +1,10 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.12.0 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:lodash:20180130': + - react-components > appirio-tech-client-app-layer > normalizr > lodash: + patched: '2018-07-03T05:04:51.906Z' + - react-components > appirio-tech-client-app-layer > html-webpack-plugin > lodash: + patched: '2018-07-03T05:04:51.906Z' diff --git a/package.json b/package.json index c55c5051b..e220b7a66 100644 --- a/package.json +++ b/package.json @@ -6,7 +6,9 @@ "start": "webpack-dev-server --history-api-fallback --host local.topcoder-dev.com --dev --tc --inline --progress --port 3000", "start-prod": "webpack-dev-server --history-api-fallback --host local.topcoder.com --prod --tc --inline --progress --port 80", "lint": "eslint .", - "test": "karma start --tc --test" + "test": "karma start --tc --test", + "snyk-protect": "snyk protect", + "prepare": "npm run snyk-protect" }, "devDependencies": { "angular-mocks": "1.6.5", @@ -75,6 +77,8 @@ "tc-angular-ellipsis": "0.1.6", "topcoder-app-r": "https://github.com/appirio-tech/topcoder-app-r.git#0.0.1", "xml2js": "0.4.17", - "zepto": "1.0.1" - } + "zepto": "1.0.1", + "snyk": "^1.88.0" + }, + "snyk": true }
Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.
Alternative Proxies: