From e7fbd2a6e771c38cbec1fdf022fc2c16bf1d88d0 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 30 Apr 2020 23:43:39 +0200 Subject: [PATCH 1/2] fix: tmp/package.json & tmp/.snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- tmp/package.json | 33 ++++++++++++++++++++++++++++++++- 1 file changed, 32 insertions(+), 1 deletion(-) diff --git a/tmp/package.json b/tmp/package.json index c55824d..798a6b8 100644 --- a/tmp/package.json +++ b/tmp/package.json @@ -1 +1,32 @@ -{"name":"","version":"1.0.0","description":"Dummy package.json","main":"index.js","scripts":{"test":"echo \"Error: no test specified\" && exit 1"},"author":"Antoine@snyk.io","license":"MIT","dependencies":{"github-release-cli":"0.3.0","core-js":"2.5.5","zone.js":"0.8.26","cache-loader":"1.2.2","@angular-devkit/build-optimizer":"0.3.2","webpack":"3.11.0","@angular/core":"5.2.6","@angular/platform-browser":"5.2.6","@angular/forms":"5.2.6","@ng-bootstrap/ng-bootstrap":"1.1.2","@angular/material":"5.2.4","@angular/common":"5.2.6","@angular/cdk":"5.2.4","@angular/animations":"5.2.6","@angular/platform-browser-dynamic":"5.2.6"}} +{ + "name": "", + "version": "1.0.0", + "description": "Dummy package.json", + "main": "index.js", + "scripts": { + "test": "echo \"Error: no test specified\" && exit 1", + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" + }, + "author": "Antoine@snyk.io", + "license": "MIT", + "dependencies": { + "github-release-cli": "0.3.0", + "core-js": "2.5.5", + "zone.js": "0.8.26", + "cache-loader": "1.2.2", + "@angular-devkit/build-optimizer": "0.3.2", + "webpack": "3.11.0", + "@angular/core": "5.2.6", + "@angular/platform-browser": "5.2.6", + "@angular/forms": "5.2.6", + "@ng-bootstrap/ng-bootstrap": "1.1.2", + "@angular/material": "5.2.4", + "@angular/common": "5.2.6", + "@angular/cdk": "5.2.4", + "@angular/animations": "5.2.6", + "@angular/platform-browser-dynamic": "5.2.6", + "snyk": "^1.316.1" + }, + "snyk": true +} From d3aa69a9ec8af4b5b4fc2f18ba2b2188609e7c8d Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 30 Apr 2020 23:43:40 +0200 Subject: [PATCH 2/2] fix: tmp/package.json & tmp/.snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- tmp/.snyk | 8 ++++++++ 1 file changed, 8 insertions(+) create mode 100644 tmp/.snyk diff --git a/tmp/.snyk b/tmp/.snyk new file mode 100644 index 0000000..26f1023 --- /dev/null +++ b/tmp/.snyk @@ -0,0 +1,8 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.14.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - webpack > async > lodash: + patched: '2020-04-30T21:43:36.943Z'