From 5e25c89459c26acf548d19395a868021e9c27c7e Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 3 Oct 2017 03:25:17 +0000 Subject: [PATCH] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/npm:fresh:20170908 The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:debug:20170905 Latest report for sokis/vuex-cli: https://snyk.io/test/github/sokis/vuex-cli --- .snyk | 8 ++++++++ package.json | 12 ++++++++---- 2 files changed, 16 insertions(+), 4 deletions(-) create mode 100644 .snyk diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..045fc93 --- /dev/null +++ b/.snyk @@ -0,0 +1,8 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.7.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:debug:20170905': + - vuex-cli-webpack > mocha > debug: + patched: '2017-10-03T03:25:17.667Z' diff --git a/package.json b/package.json index 698fb88..47f485a 100644 --- a/package.json +++ b/package.json @@ -15,7 +15,9 @@ "clean": "rimraf lib", "publish:patch": "npm test && npm run clean && npm run build && npm version patch && npm publish", "publish:minor": "npm test && npm run clean && npm run build && npm version minor && npm publish", - "release": "bash build/release.sh" + "release": "bash build/release.sh", + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" }, "bin": { "vuex": "bin/vuex.js", @@ -57,7 +59,7 @@ "fs-extra": "^0.26.5", "humps": "^1.0.0", "jsonfile": "^2.2.3", - "koa": "^1.2.1", + "koa": "^2.2.0", "lodash": "^4.5.1", "log-update": "^1.0.2", "minimist": "^1.2.0", @@ -66,7 +68,8 @@ "temp": "^0.8.3", "through": "^2.3.8", "vuex-cli-webpack": "^1.0.12", - "walk-sync": "^0.2.6" + "walk-sync": "^0.2.6", + "snyk": "^1.42.3" }, "devDependencies": { "babel-cli": "^6.5.1", @@ -82,5 +85,6 @@ "mocha": "^2.4.5", "rimraf": "^2.5.2", "sinon": "^1.17.3" - } + }, + "snyk": true }