From 75ce5372027b919c472c04a9d36eb427f15569ab Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 6 May 2019 08:17:33 +0000 Subject: [PATCH] fix: client/.snyk & client/package.json to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-AXIOS-174505 --- client/.snyk | 8 ++++++++ client/package.json | 10 +++++++--- 2 files changed, 15 insertions(+), 3 deletions(-) create mode 100644 client/.snyk diff --git a/client/.snyk b/client/.snyk new file mode 100644 index 0000000..24141e2 --- /dev/null +++ b/client/.snyk @@ -0,0 +1,8 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.13.3 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-AXIOS-174505: + - axios: + patched: '2019-05-06T08:17:31.760Z' diff --git a/client/package.json b/client/package.json index 249dd0c..c602692 100644 --- a/client/package.json +++ b/client/package.json @@ -11,7 +11,9 @@ "e2e": "node test/e2e/runner.js", "test": "npm run unit && npm run e2e", "lint": "eslint --ext .js,.vue src test/unit test/e2e/specs", - "build": "node build/build.js" + "build": "node build/build.js", + "snyk-protect": "snyk protect", + "prepare": "npm run snyk-protect" }, "dependencies": { "axios": "^0.18.0", @@ -23,7 +25,8 @@ "vue": "^2.5.17", "vue-material": "^1.0.0", "vue-router": "^3.0.1", - "vuetify": "^1.0.17" + "vuetify": "^1.0.17", + "snyk": "^1.161.1" }, "devDependencies": { "autoprefixer": "^7.1.2", @@ -102,5 +105,6 @@ "> 1%", "last 2 versions", "not ie <= 8" - ] + ], + "snyk": true }