From 995742f7263a912cf00aaaa5417b7eeb9f35a2ad Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 23 Jun 2018 23:23:42 +0000 Subject: [PATCH] fix: .snyk & package.json to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:hoek:20180212 --- .snyk | 11 ++++++++++- package.json | 5 +++-- 2 files changed, 13 insertions(+), 3 deletions(-) diff --git a/.snyk b/.snyk index c336f47..f71a6d4 100644 --- a/.snyk +++ b/.snyk @@ -1,5 +1,5 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.7.0 +version: v1.12.0 ignore: {} # patches apply the minimum changes required to fix a vulnerability patch: @@ -9,3 +9,12 @@ patch: 'npm:ws:20160104': - hypertimer > ws: patched: '2017-02-18T10:10:49.290Z' + 'npm:hoek:20180212': + - mosca > leveldown > prebuild > node-gyp > request > hawk > hoek: + patched: '2018-06-23T23:23:40.699Z' + - mosca > leveldown > prebuild > node-gyp > request > hawk > boom > hoek: + patched: '2018-06-23T23:23:40.699Z' + - mosca > leveldown > prebuild > node-gyp > request > hawk > sntp > hoek: + patched: '2018-06-23T23:23:40.699Z' + - mosca > leveldown > prebuild > node-gyp > request > hawk > cryptiles > boom > hoek: + patched: '2018-06-23T23:23:40.699Z' diff --git a/package.json b/package.json index 8f9a643..84730ae 100644 --- a/package.json +++ b/package.json @@ -23,7 +23,7 @@ "hypertimer": "^2.1.3", "mosca": "^1.1.1", "winston": "^2.1.0", - "snyk": "^1.25.0" + "snyk": "^1.83.0" }, "preferGlobal": "true", "bugs": { @@ -32,7 +32,8 @@ "homepage": "https://github.com/TNOCS/csWeb-sim#readme", "scripts": { "snyk-protect": "snyk protect", - "prepublish": "npm run snyk-protect" + "prepublish": "npm run snyk-protect", + "prepare": "npm run snyk-protect" }, "snyk": true }