diff --git a/.snyk b/.snyk index 1dacb3e279..7132d1a154 100644 --- a/.snyk +++ b/.snyk @@ -1,12 +1,5 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. version: v1.25.0 -ignore: - 'snyk:lic:npm:postcss-values-parser:MPL-2.0': - - '*': - reason: Given the library is employed during the build step which is non-distributed, it is compliant. - expires: 2033-09-15T05:46:34.098Z - created: 2023-09-15T05:46:34.102Z -patch: {} exclude: global: - routes/index.js diff --git a/package.json b/package.json index 3f95108c42..86e36eef48 100644 --- a/package.json +++ b/package.json @@ -15,6 +15,7 @@ "test": "snyk test" }, "dependencies": { + "postcss-values-parser": "6.0.2", "adm-zip": "0.5.2", "body-parser": "1.9.0", "cfenv": "^1.0.4",