From bf1e07526e44653dd4ace9a1e5ccb26e24d8746c Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 4 Dec 2018 22:13:25 +0000 Subject: [PATCH] fix: examples/next/.snyk & examples/next/package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/npm:atob:20180429 - https://snyk.io/vuln/npm:cryptiles:20180710 - https://snyk.io/vuln/npm:deep-extend:20180409 - https://snyk.io/vuln/npm:extend:20180424 - https://snyk.io/vuln/npm:hoek:20180212 - https://snyk.io/vuln/npm:react-dom:20180802 - https://snyk.io/vuln/npm:stringstream:20180511 - https://snyk.io/vuln/npm:ua-parser-js:20180227 The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:hoek:20180212 --- examples/next/.snyk | 14 ++++++++++++++ examples/next/package.json | 10 +++++++--- 2 files changed, 21 insertions(+), 3 deletions(-) create mode 100644 examples/next/.snyk diff --git a/examples/next/.snyk b/examples/next/.snyk new file mode 100644 index 0000000..5bd28c3 --- /dev/null +++ b/examples/next/.snyk @@ -0,0 +1,14 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.13.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:hoek:20180212': + - next > webpack > watchpack > chokidar > fsevents > node-pre-gyp > hawk > hoek: + patched: '2018-12-04T22:13:23.246Z' + - next > webpack > watchpack > chokidar > fsevents > node-pre-gyp > hawk > boom > hoek: + patched: '2018-12-04T22:13:23.246Z' + - next > webpack > watchpack > chokidar > fsevents > node-pre-gyp > hawk > sntp > hoek: + patched: '2018-12-04T22:13:23.246Z' + - next > webpack > watchpack > chokidar > fsevents > node-pre-gyp > hawk > cryptiles > boom > hoek: + patched: '2018-12-04T22:13:23.246Z' diff --git a/examples/next/package.json b/examples/next/package.json index 202e758..c73f25a 100644 --- a/examples/next/package.json +++ b/examples/next/package.json @@ -8,11 +8,15 @@ "next": "^5.1.0", "react": "^16.3.2", "react-dip": "^0.0.3-beta.9", - "react-dom": "^16.3.2" + "react-dom": "^16.3.3", + "snyk": "^1.114.0" }, "scripts": { "dev": "next", "build": "next build", - "start": "next start" - } + "start": "next start", + "snyk-protect": "snyk protect", + "prepare": "npm run snyk-protect" + }, + "snyk": true }