From 8d13d24b70dd26eb76d13b46ab21520481699b25 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sun, 14 Apr 2024 22:25:01 +0000 Subject: [PATCH] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-AJV-584908 - https://snyk.io/vuln/SNYK-JS-ANSIREGEX-1583908 - https://snyk.io/vuln/SNYK-JS-BABELTRAVERSE-5962463 - https://snyk.io/vuln/SNYK-JS-DECODEURICOMPONENT-3149970 - https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116 - https://snyk.io/vuln/SNYK-JS-ISTANBULREPORTS-2328088 - https://snyk.io/vuln/SNYK-JS-KINDOF-537849 - https://snyk.io/vuln/SNYK-JS-MINIMATCH-3050818 - https://snyk.io/vuln/SNYK-JS-MINIMIST-2429795 - https://snyk.io/vuln/SNYK-JS-MINIMIST-559764 - https://snyk.io/vuln/SNYK-JS-MIXINDEEP-450212 - https://snyk.io/vuln/SNYK-JS-MOCHA-2863123 - https://snyk.io/vuln/SNYK-JS-MOCHA-561476 - https://snyk.io/vuln/SNYK-JS-SETVALUE-1540541 - https://snyk.io/vuln/SNYK-JS-SETVALUE-450213 - https://snyk.io/vuln/SNYK-JS-UNSETVALUE-2400660 - https://snyk.io/vuln/SNYK-JS-YARGSPARSER-560381 - https://snyk.io/vuln/npm:mem:20180117 The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 - https://snyk.io/vuln/npm:extend:20180424 --- .snyk | 67 ++++++++++++++++++++++++++++++++++++++++++++++++++++ package.json | 16 ++++++++----- 2 files changed, 77 insertions(+), 6 deletions(-) create mode 100644 .snyk diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..993e41f --- /dev/null +++ b/.snyk @@ -0,0 +1,67 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.25.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:extend:20180424': + - coveralls > request > extend: + patched: '2024-04-14T22:24:58.158Z' + id: 'npm:extend:20180424' + path: coveralls > request > extend + SNYK-JS-LODASH-567746: + - standard > eslint > lodash: + patched: '2024-04-14T22:24:58.158Z' + id: SNYK-JS-LODASH-567746 + path: standard > eslint > lodash + - standard > eslint-plugin-import > lodash: + patched: '2024-04-14T22:24:58.158Z' + id: SNYK-JS-LODASH-567746 + path: standard > eslint-plugin-import > lodash + - nyc > istanbul-lib-instrument > babel-types > lodash: + patched: '2024-04-14T22:24:58.158Z' + id: SNYK-JS-LODASH-567746 + path: nyc > istanbul-lib-instrument > babel-types > lodash + - nyc > istanbul-lib-instrument > babel-generator > lodash: + patched: '2024-04-14T22:24:58.158Z' + id: SNYK-JS-LODASH-567746 + path: nyc > istanbul-lib-instrument > babel-generator > lodash + - nyc > istanbul-lib-instrument > babel-traverse > lodash: + patched: '2024-04-14T22:24:58.158Z' + id: SNYK-JS-LODASH-567746 + path: nyc > istanbul-lib-instrument > babel-traverse > lodash + - nyc > istanbul-lib-instrument > babel-template > lodash: + patched: '2024-04-14T22:24:58.158Z' + id: SNYK-JS-LODASH-567746 + path: nyc > istanbul-lib-instrument > babel-template > lodash + - standard > eslint > inquirer > lodash: + patched: '2024-04-14T22:24:58.158Z' + id: SNYK-JS-LODASH-567746 + path: standard > eslint > inquirer > lodash + - standard > eslint > table > lodash: + patched: '2024-04-14T22:24:58.158Z' + id: SNYK-JS-LODASH-567746 + path: standard > eslint > table > lodash + - nyc > istanbul-lib-instrument > babel-generator > babel-types > lodash: + patched: '2024-04-14T22:24:58.158Z' + id: SNYK-JS-LODASH-567746 + path: nyc > istanbul-lib-instrument > babel-generator > babel-types > lodash + - nyc > istanbul-lib-instrument > babel-traverse > babel-types > lodash: + patched: '2024-04-14T22:24:58.158Z' + id: SNYK-JS-LODASH-567746 + path: nyc > istanbul-lib-instrument > babel-traverse > babel-types > lodash + - nyc > istanbul-lib-instrument > babel-template > babel-types > lodash: + patched: '2024-04-14T22:24:58.158Z' + id: SNYK-JS-LODASH-567746 + path: nyc > istanbul-lib-instrument > babel-template > babel-types > lodash + - nyc > istanbul-lib-instrument > babel-template > babel-traverse > lodash: + patched: '2024-04-14T22:24:58.158Z' + id: SNYK-JS-LODASH-567746 + path: >- + nyc > istanbul-lib-instrument > babel-template > babel-traverse > + lodash + - nyc > istanbul-lib-instrument > babel-template > babel-traverse > babel-types > lodash: + patched: '2024-04-14T22:24:58.158Z' + id: SNYK-JS-LODASH-567746 + path: >- + nyc > istanbul-lib-instrument > babel-template > babel-traverse > + babel-types > lodash diff --git a/package.json b/package.json index 88df1ba..afcc747 100644 --- a/package.json +++ b/package.json @@ -5,7 +5,9 @@ "main": "index.js", "scripts": { "test": "standard && nyc --reporter=html --reporter=text mocha test/**/*.test.js", - "coverage": "nyc report --reporter=text-lcov | coveralls" + "coverage": "nyc report --reporter=text-lcov | coveralls", + "prepare": "npm run snyk-protect", + "snyk-protect": "snyk-protect" }, "repository": { "type": "git", @@ -26,13 +28,14 @@ "node": ">=6.0.0" }, "dependencies": { - "mongodb": "^3.1.3" + "mongodb": "^3.1.3", + "@snyk/protect": "latest" }, "devDependencies": { "coveralls": "^3.0.1", - "mocha": "^5.1.1", - "nyc": "^11.7.3", - "standard": "^11.0.1" + "mocha": "^10.1.0", + "nyc": "^15.0.0", + "standard": "^16.0.0" }, "standard": { "globals": [ @@ -40,5 +43,6 @@ "it", "before" ] - } + }, + "snyk": true }