diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..993e41f --- /dev/null +++ b/.snyk @@ -0,0 +1,67 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.25.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:extend:20180424': + - coveralls > request > extend: + patched: '2024-04-14T22:24:58.158Z' + id: 'npm:extend:20180424' + path: coveralls > request > extend + SNYK-JS-LODASH-567746: + - standard > eslint > lodash: + patched: '2024-04-14T22:24:58.158Z' + id: SNYK-JS-LODASH-567746 + path: standard > eslint > lodash + - standard > eslint-plugin-import > lodash: + patched: '2024-04-14T22:24:58.158Z' + id: SNYK-JS-LODASH-567746 + path: standard > eslint-plugin-import > lodash + - nyc > istanbul-lib-instrument > babel-types > lodash: + patched: '2024-04-14T22:24:58.158Z' + id: SNYK-JS-LODASH-567746 + path: nyc > istanbul-lib-instrument > babel-types > lodash + - nyc > istanbul-lib-instrument > babel-generator > lodash: + patched: '2024-04-14T22:24:58.158Z' + id: SNYK-JS-LODASH-567746 + path: nyc > istanbul-lib-instrument > babel-generator > lodash + - nyc > istanbul-lib-instrument > babel-traverse > lodash: + patched: '2024-04-14T22:24:58.158Z' + id: SNYK-JS-LODASH-567746 + path: nyc > istanbul-lib-instrument > babel-traverse > lodash + - nyc > istanbul-lib-instrument > babel-template > lodash: + patched: '2024-04-14T22:24:58.158Z' + id: SNYK-JS-LODASH-567746 + path: nyc > istanbul-lib-instrument > babel-template > lodash + - standard > eslint > inquirer > lodash: + patched: '2024-04-14T22:24:58.158Z' + id: SNYK-JS-LODASH-567746 + path: standard > eslint > inquirer > lodash + - standard > eslint > table > lodash: + patched: '2024-04-14T22:24:58.158Z' + id: SNYK-JS-LODASH-567746 + path: standard > eslint > table > lodash + - nyc > istanbul-lib-instrument > babel-generator > babel-types > lodash: + patched: '2024-04-14T22:24:58.158Z' + id: SNYK-JS-LODASH-567746 + path: nyc > istanbul-lib-instrument > babel-generator > babel-types > lodash + - nyc > istanbul-lib-instrument > babel-traverse > babel-types > lodash: + patched: '2024-04-14T22:24:58.158Z' + id: SNYK-JS-LODASH-567746 + path: nyc > istanbul-lib-instrument > babel-traverse > babel-types > lodash + - nyc > istanbul-lib-instrument > babel-template > babel-types > lodash: + patched: '2024-04-14T22:24:58.158Z' + id: SNYK-JS-LODASH-567746 + path: nyc > istanbul-lib-instrument > babel-template > babel-types > lodash + - nyc > istanbul-lib-instrument > babel-template > babel-traverse > lodash: + patched: '2024-04-14T22:24:58.158Z' + id: SNYK-JS-LODASH-567746 + path: >- + nyc > istanbul-lib-instrument > babel-template > babel-traverse > + lodash + - nyc > istanbul-lib-instrument > babel-template > babel-traverse > babel-types > lodash: + patched: '2024-04-14T22:24:58.158Z' + id: SNYK-JS-LODASH-567746 + path: >- + nyc > istanbul-lib-instrument > babel-template > babel-traverse > + babel-types > lodash diff --git a/package.json b/package.json index 88df1ba..afcc747 100644 --- a/package.json +++ b/package.json @@ -5,7 +5,9 @@ "main": "index.js", "scripts": { "test": "standard && nyc --reporter=html --reporter=text mocha test/**/*.test.js", - "coverage": "nyc report --reporter=text-lcov | coveralls" + "coverage": "nyc report --reporter=text-lcov | coveralls", + "prepare": "npm run snyk-protect", + "snyk-protect": "snyk-protect" }, "repository": { "type": "git", @@ -26,13 +28,14 @@ "node": ">=6.0.0" }, "dependencies": { - "mongodb": "^3.1.3" + "mongodb": "^3.1.3", + "@snyk/protect": "latest" }, "devDependencies": { "coveralls": "^3.0.1", - "mocha": "^5.1.1", - "nyc": "^11.7.3", - "standard": "^11.0.1" + "mocha": "^10.1.0", + "nyc": "^15.0.0", + "standard": "^16.0.0" }, "standard": { "globals": [ @@ -40,5 +43,6 @@ "it", "before" ] - } + }, + "snyk": true }