fix: package.json, package-lock.json & .snyk to reduce vulnerabilities (

#42) The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746
muxinc · Jul 26, 2022 · 79206b4 · 79206b4
1 parent 3e7747d
commit 79206b4
Show file tree

Hide file tree

Showing 3 changed files with 37 additions and 96 deletions.
diff --git a/.snyk b/.snyk
@@ -0,0 +1,8 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.25.0
+ignore: {}
+# patches apply the minimum changes required to fix a vulnerability
+patch:
+  SNYK-JS-LODASH-567746:
+    - bslint > lodash:
+        patched: '2022-07-26T18:51:43.581Z'
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -1,5 +1,11 @@
 {
   "dependencies": {
-    "bslint": "^5.15.3"
-  }
+    "bslint": "^5.15.3",
+    "@snyk/protect": "latest"
+  },
+  "scripts": {
+    "prepare": "npm run snyk-protect",
+    "snyk-protect": "snyk-protect"
+  },
+  "snyk": true
 }