diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..e671be7 --- /dev/null +++ b/.snyk @@ -0,0 +1,35 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.7.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:debug:20170905': + - fh-mbaas-api > debug: + patched: '2017-10-11T14:39:22.691Z' + - fh-mbaas-api > fh-mbaas-express > body-parser > debug: + patched: '2017-10-11T14:39:22.691Z' + - fh-mbaas-api > fh-mbaas-express > express > debug: + patched: '2017-10-11T14:39:22.691Z' + - fh-mbaas-api > fh-mbaas-express > express > send > debug: + patched: '2017-10-11T14:39:22.691Z' + - fh-mbaas-api > fh-mbaas-express > express > serve-static > send > debug: + patched: '2017-10-11T14:39:22.691Z' + - fh-mbaas-api > fh-sync > debug: + patched: '2017-10-11T14:39:22.691Z' + 'npm:ms:20170412': + - fh-mbaas-api > debug > ms: + patched: '2017-10-11T14:39:22.691Z' + - fh-mbaas-api > fh-mbaas-express > express > serve-static > send > ms: + patched: '2017-10-11T14:39:22.691Z' + - fh-mbaas-api > fh-mbaas-express > body-parser > debug > ms: + patched: '2017-10-11T14:39:22.691Z' + - fh-mbaas-api > fh-mbaas-express > express > debug > ms: + patched: '2017-10-11T14:39:22.691Z' + - fh-mbaas-api > fh-mbaas-express > express > send > debug > ms: + patched: '2017-10-11T14:39:22.691Z' + - fh-mbaas-api > fh-mbaas-express > express > serve-static > send > debug > ms: + patched: '2017-10-11T14:39:22.691Z' + - fh-mbaas-api > fh-mbaas-express > express > send > ms: + patched: '2017-10-11T14:39:22.691Z' + - fh-mbaas-api > fh-sync > debug > ms: + patched: '2017-10-11T14:39:22.691Z' diff --git a/package.json b/package.json index 84b084d..3adf080 100644 --- a/package.json +++ b/package.json @@ -2,12 +2,13 @@ "name": "iBeaconManager", "version": "0.1.0", "dependencies": { - "express": "4.0.0", - "request": "2.79.0", + "express": "4.16.0", + "request": "2.81.0", "fh-mbaas-api": "~8.0.2", - "body-parser": "~1.0.2", + "body-parser": "~1.17.1", "cors": "~2.2.0", - "underscore": "~1.6.0" + "underscore": "~1.6.0", + "snyk": "^1.42.6" }, "devDependencies": { "grunt": "^0.4.0", @@ -34,7 +35,10 @@ "unit": "grunt unit", "coverage-unit": "grunt coverage-unit", "accept": "grunt accept", - "test": "npm run unit" + "test": "npm run unit", + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" }, - "license": "Apache-2.0" + "license": "Apache-2.0", + "snyk": true }