From c02dd35dd150609b57e383ca917aca57ef68db0d Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 2 Nov 2017 08:21:05 +0000 Subject: [PATCH] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:marked:20170907 Latest report for actum/styleguide: https://snyk.io/test/github/actum/styleguide --- .snyk | 5 ++++- package.json | 2 +- 2 files changed, 5 insertions(+), 2 deletions(-) diff --git a/.snyk b/.snyk index d7def0e..b73857a 100644 --- a/.snyk +++ b/.snyk @@ -1,5 +1,5 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.7.1 +version: v1.8.0 ignore: {} # patches apply the minimum changes required to fix a vulnerability patch: @@ -12,3 +12,6 @@ patch: 'npm:uglify-js:20151024': - kss > handlebars > uglify-js: patched: '2017-08-14T08:08:09.962Z' + 'npm:marked:20170907': + - kss > marked: + patched: '2017-11-02T08:21:05.480Z' diff --git a/package.json b/package.json index 698fed9..f6e3c79 100644 --- a/package.json +++ b/package.json @@ -105,7 +105,7 @@ "dependencies": { "handlebars": "^4.0.10", "kss": "^2.4.0", - "snyk": "^1.38.1" + "snyk": "^1.47.0" }, "snyk": true }