From 8d2a432d21ec8df4855d048c38c6920c237175d3 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 16 May 2019 08:19:10 +0000 Subject: [PATCH] fix: .snyk & package.json to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:minimatch:20160620 - https://snyk.io/vuln/npm:uglify-js:20151024 --- .snyk | 13 +++++++ package.json | 102 +++++++++++++++++++++++++-------------------------- 2 files changed, 64 insertions(+), 51 deletions(-) create mode 100644 .snyk diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..bdeea97 --- /dev/null +++ b/.snyk @@ -0,0 +1,13 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.13.3 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:minimatch:20160620': + - gulp-browserify > browserify > glob > minimatch: + patched: '2019-05-16T08:19:06.292Z' + 'npm:uglify-js:20151024': + - gulp-browserify > browserify > umd > ruglify > uglify-js: + patched: '2019-05-16T08:19:06.292Z' + - gulp-browserify > browserify > umd > uglify-js: + patched: '2019-05-16T08:19:06.292Z' diff --git a/package.json b/package.json index abf60cf..4a07cb3 100644 --- a/package.json +++ b/package.json @@ -1,53 +1,53 @@ { - "name": "Objectified", - "version": "0.6.0", - "author": "Delmarc Eric Rosario ", - "description": "A Real Pure JavaScript Template 'Engine'", - "contributors": [ - { - "name": "Delmarc Eric Rosario", - "email": "delmarc@uneek1.com" - } - ], - "bin": { - }, - "scripts": { - }, - "main": "", - "repository": { - "type": "git", - "url": "https://github.com/delmarc/Objectified.git" - }, - "bugs": { - "url": "https://github.com/delmarc/Objectified/issues" - }, - "keywords": [ - "Objectified" - ], - "dependencies" : { - "gulp":"", - "gulp-browserify":"", - "gulp-concat":"", - "gulp-jshint":"", - "gulp-livereload":"", - "gulp-mocha":"", - "gulp-notify":"", - "gulp-open":"", - "gulp-rename":"", - "gulp-uglify":"", - - "browserify":"", - "connect":"", - "mocha":"", - "vinyl-source-stream":"" - }, - "analyze": false, - "devDependencies": { - }, - "bundledDependencies": [ - ], - "license": "MIT", - "engines": { - "node": ">=0.10.24" - } + "name": "Objectified", + "version": "0.6.0", + "author": "Delmarc Eric Rosario ", + "description": "A Real Pure JavaScript Template 'Engine'", + "contributors": [ + { + "name": "Delmarc Eric Rosario", + "email": "delmarc@uneek1.com" + } + ], + "bin": {}, + "scripts": { + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" + }, + "main": "", + "repository": { + "type": "git", + "url": "https://github.com/delmarc/Objectified.git" + }, + "bugs": { + "url": "https://github.com/delmarc/Objectified/issues" + }, + "keywords": [ + "Objectified" + ], + "dependencies": { + "gulp": "", + "gulp-browserify": "", + "gulp-concat": "", + "gulp-jshint": "", + "gulp-livereload": "", + "gulp-mocha": "", + "gulp-notify": "", + "gulp-open": "", + "gulp-rename": "", + "gulp-uglify": "", + "browserify": "", + "connect": "", + "mocha": "", + "vinyl-source-stream": "", + "snyk": "^1.165.0" + }, + "analyze": false, + "devDependencies": {}, + "bundledDependencies": [], + "license": "MIT", + "engines": { + "node": ">=0.10.24" + }, + "snyk": true } \ No newline at end of file