From e140740cc8c95ec81245f3359c79f67af4f93bd2 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 6 May 2019 01:10:38 +0000 Subject: [PATCH] fix: client/.snyk & client/package.json to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-AXIOS-174505 --- client/.snyk | 8 ++++++++ client/package.json | 10 +++++++--- 2 files changed, 15 insertions(+), 3 deletions(-) create mode 100644 client/.snyk diff --git a/client/.snyk b/client/.snyk new file mode 100644 index 0000000..1591c06 --- /dev/null +++ b/client/.snyk @@ -0,0 +1,8 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.13.3 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-AXIOS-174505: + - axios: + patched: '2019-05-06T01:10:37.210Z' diff --git a/client/package.json b/client/package.json index 6cf5a99..0767947 100644 --- a/client/package.json +++ b/client/package.json @@ -5,7 +5,9 @@ "scripts": { "serve": "vue-cli-service serve", "build": "vue-cli-service build", - "lint": "vue-cli-service lint" + "lint": "vue-cli-service lint", + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" }, "dependencies": { "axios": "^0.18.0", @@ -16,7 +18,8 @@ "timeago.js": "^4.0.0-beta.1", "vue": "^2.5.17", "vue-highlight.js": "^2.2.0", - "vue-router": "^3.0.1" + "vue-router": "^3.0.1", + "snyk": "^1.161.1" }, "devDependencies": { "@vue/cli-plugin-babel": "^3.1.1", @@ -30,5 +33,6 @@ "node-sass": "^4.10.0", "sass-loader": "^7.1.0", "vue-template-compiler": "^2.5.17" - } + }, + "snyk": true }