From aa2172112420cc5154b138abdf9465e982b11e8d Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 24 Oct 2018 04:06:57 +0000 Subject: [PATCH] fix: the-machine/.snyk & the-machine/package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/npm:minimatch:20160620 The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:minimatch:20160620 --- the-machine/.snyk | 12 ++++++++++++ the-machine/package.json | 12 ++++++++---- 2 files changed, 20 insertions(+), 4 deletions(-) create mode 100644 the-machine/.snyk diff --git a/the-machine/.snyk b/the-machine/.snyk new file mode 100644 index 0000000..2b933df --- /dev/null +++ b/the-machine/.snyk @@ -0,0 +1,12 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.12.0 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:minimatch:20160620': + - gulp > vinyl-fs > glob-stream > minimatch: + patched: '2018-10-24T04:06:55.709Z' + - gulp > vinyl-fs > glob-watcher > gaze > globule > minimatch: + patched: '2018-10-24T04:06:55.709Z' + - gulp > vinyl-fs > glob-watcher > gaze > globule > glob > minimatch: + patched: '2018-10-24T04:06:55.709Z' diff --git a/the-machine/package.json b/the-machine/package.json index 8adbd0a..111009a 100644 --- a/the-machine/package.json +++ b/the-machine/package.json @@ -13,7 +13,9 @@ "generate": "node generate", "test": "mocha --timeout 10000 --reporter spec --bail ./features/**/*-test.js", "test-cover": "istanbul cover node_modules/mocha/bin/_mocha --report html -- --timeout 10000 --reporter spec ./features/**/*-test.js", - "test-travis": "istanbul cover node_modules/mocha/bin/_mocha --report lcovonly -- --timeout 10000 --reporter spec ./features/**/*-test.js" + "test-travis": "istanbul cover node_modules/mocha/bin/_mocha --report lcovonly -- --timeout 10000 --reporter spec ./features/**/*-test.js", + "snyk-protect": "snyk protect", + "prepare": "npm run snyk-protect" }, "repository": { "type": "git", @@ -33,9 +35,10 @@ "fs-extra": "^4.0.2", "gettext-parser": "^1.3.0", "glob": "^7.1.2", - "gulp": "3.9.x", + "gulp": "4.0.0", "i18n": "^0.8.3", - "progress": "2.0.x" + "progress": "2.0.x", + "snyk": "^1.104.2" }, "engines": { "node": ">=8.7.0", @@ -46,5 +49,6 @@ "type": "MIT", "url": "https://github.com/CodeCorico/MemoryOverflow/blob/master/LICENSE" } - ] + ], + "snyk": true }