From 4c6940aba53f6bafc0b499e7aead18a04ac31a6d Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 1 May 2020 06:49:15 +0300 Subject: [PATCH] fix: package.json, package-lock.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- package.json | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/package.json b/package.json index 6c3584c7..faf56b37 100644 --- a/package.json +++ b/package.json @@ -27,7 +27,8 @@ "node-sass": "^4.11.0", "original-fs": "^1.0.0", "semver": "^5.6.0", - "tar-fs": "^2.0.0" + "tar-fs": "^2.0.0", + "snyk": "^1.316.1" }, "devDependencies": { "@babel/core": "^7.3.4", @@ -100,6 +101,9 @@ "release": "npm run lint && npm run build_release && gulp release && npm run package_release", "release_test": "npm run build_release && gulp release", "update_release": "npm run build_release && gulp release", - "inject": "node scripts/inject.js" - } + "inject": "node scripts/inject.js", + "snyk-protect": "snyk protect", + "prepare": "npm run snyk-protect" + }, + "snyk": true }