From 028cf27027c75ecc14d501c9b26f0be4ec6a2347 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sun, 15 Dec 2019 04:10:06 +0000 Subject: [PATCH] fix: apps/test-suite/runner/package.json & apps/test-suite/runner/.snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-TREEKILL-536781 --- apps/test-suite/runner/.snyk | 8 ++++++++ apps/test-suite/runner/package.json | 10 +++++++--- 2 files changed, 15 insertions(+), 3 deletions(-) create mode 100644 apps/test-suite/runner/.snyk diff --git a/apps/test-suite/runner/.snyk b/apps/test-suite/runner/.snyk new file mode 100644 index 00000000000000..9c12d2bf44e58b --- /dev/null +++ b/apps/test-suite/runner/.snyk @@ -0,0 +1,8 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.14.0 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-TREEKILL-536781: + - '@expo/xdl > tree-kill': + patched: '2019-12-15T04:10:02.766Z' diff --git a/apps/test-suite/runner/package.json b/apps/test-suite/runner/package.json index 041d3f1d6a98b8..322a7e08525c24 100644 --- a/apps/test-suite/runner/package.json +++ b/apps/test-suite/runner/package.json @@ -4,7 +4,9 @@ "description": "Runner for Exponent SDK Test Suite", "main": "index.js", "scripts": { - "test": "echo \"Error: no test specified\" && exit 1" + "test": "echo \"Error: no test specified\" && exit 1", + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" }, "author": "", "license": "MIT", @@ -14,6 +16,8 @@ "babel-register": "^6.24.1", "minimist": "^1.2.0", "request": "^2.83.0", - "request-promise-native": "^1.0.4" - } + "request-promise-native": "^1.0.4", + "snyk": "^1.260.0" + }, + "snyk": true }