diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..49ba2d4 --- /dev/null +++ b/.snyk @@ -0,0 +1,8 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.25.0 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - babel-preset-es2015 > babel-plugin-transform-es2015-modules-umd > babel-plugin-transform-es2015-modules-amd > babel-plugin-transform-es2015-modules-commonjs > babel-template > babel-traverse > babel-types > lodash: + patched: '2023-01-19T19:16:47.938Z' diff --git a/package-lock.json b/package-lock.json index bcb5c74..0cff52a 100644 --- a/package-lock.json +++ b/package-lock.json @@ -26,6 +26,11 @@ "fastq": "^1.6.0" } }, + "@snyk/protect": { + "version": "1.1087.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.1087.0.tgz", + "integrity": "sha512-BQeiQ/RVaT+xtMTPJoliAPqvLDFI62jUtdLhVO3zQa53T+dZLAlMzDoI9zjW5G2djlJsWUYnfHGNdkmMEMHdYQ==" + }, "@types/http-proxy": { "version": "1.17.9", "resolved": "https://registry.npmjs.org/@types/http-proxy/-/http-proxy-1.17.9.tgz", diff --git a/package.json b/package.json index c5e2b94..4fb1d0d 100644 --- a/package.json +++ b/package.json @@ -3,7 +3,9 @@ "private": true, "scripts": { "dev": "cross-env NODE_ENV=development webpack-dev-server --hot", - "build": "cross-env NODE_ENV=production webpack --progress --hide-modules" + "build": "cross-env NODE_ENV=production webpack --progress --hide-modules", + "prepare": "npm run snyk-protect", + "snyk-protect": "snyk-protect" }, "dependencies": { "babel-core": "^6.25.0", @@ -21,7 +23,8 @@ "svelte-extras": "^1.4.1", "svelte-loader": "^2.1.0", "webpack": "^4.26.0", - "webpack-dev-server": "^4.0.0" + "webpack-dev-server": "^4.0.0", + "@snyk/protect": "latest" }, "devDependencies": { "compression-webpack-plugin": "^1.0.1", @@ -33,5 +36,6 @@ "style-ext-html-webpack-plugin": "^3.4.1", "svg-inline-loader": "^0.8.0", "webpack-bundle-size-analyzer": "^2.7.0" - } + }, + "snyk": true }