From 2718ac19a051a5c9dc64bbc3b6b5dd45c423fedc Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 29 Sep 2017 03:22:09 +0000 Subject: [PATCH] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:debug:20170905 Latest report for samsonjs/samhuri.net: https://snyk.io/test/github/samsonjs/samhuri.net --- .snyk | 23 ++++++++++++++++++++++- package.json | 5 +++-- 2 files changed, 25 insertions(+), 3 deletions(-) diff --git a/.snyk b/.snyk index e1a9ca9..b55076f 100644 --- a/.snyk +++ b/.snyk @@ -1,5 +1,5 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.7.0 +version: v1.7.1 ignore: {} # patches apply the minimum changes required to fix a vulnerability patch: @@ -20,3 +20,24 @@ patch: 'npm:uglify-js:20151024': - harp > terraform > jade > transformers > uglify-js: patched: '2017-04-21T04:58:35.183Z' + 'npm:debug:20170905': + - harp > connect > debug: + patched: '2017-09-29T03:22:08.982Z' + - harp > connect > express-session > debug: + patched: '2017-09-29T03:22:08.982Z' + - harp > connect > finalhandler > debug: + patched: '2017-09-29T03:22:08.982Z' + - harp > connect > morgan > debug: + patched: '2017-09-29T03:22:08.982Z' + - harp > connect > serve-index > debug: + patched: '2017-09-29T03:22:08.982Z' + - harp > send > debug: + patched: '2017-09-29T03:22:08.982Z' + - harp > connect > body-parser > debug: + patched: '2017-09-29T03:22:08.982Z' + - harp > connect > compression > debug: + patched: '2017-09-29T03:22:08.982Z' + - harp > connect > connect-timeout > debug: + patched: '2017-09-29T03:22:08.982Z' + - harp > connect > serve-static > send > debug: + patched: '2017-09-29T03:22:08.982Z' diff --git a/package.json b/package.json index 79e7e1f..4e3e6af 100644 --- a/package.json +++ b/package.json @@ -6,11 +6,12 @@ "harp": "^0.24.0", "thepusher": "^0.1.4", "uglify-js": "^3.0.9", - "snyk": "^1.30.1" + "snyk": "^1.41.1" }, "scripts": { "snyk-protect": "snyk protect", - "prepublish": "npm run snyk-protect" + "prepublish": "npm run snyk-protect", + "prepare": "npm run snyk-protect" }, "snyk": true }