diff --git a/.snyk b/.snyk new file mode 100644 index 000000000..11c80461d --- /dev/null +++ b/.snyk @@ -0,0 +1,63 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.7.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:hawk:20160119': + - generator-bastion > yeoman-generator > request > hawk: + patched: '2017-06-07T13:29:27.096Z' + - grunt-bower-task > bower > bower-registry-client > request > hawk: + patched: '2017-06-07T13:29:27.096Z' + - grunt-bower-task > bower > request > hawk: + patched: '2017-06-07T13:29:27.096Z' + 'npm:minimatch:20160620': + - generator-bastion > yeoman-generator > file-utils > minimatch: + patched: '2017-06-07T13:29:27.096Z' + - generator-bastion > yeoman-generator > glob > minimatch: + patched: '2017-06-07T13:29:27.096Z' + - generator-bastion > yeoman-generator > file-utils > glob > minimatch: + patched: '2017-06-07T13:29:27.096Z' + - generator-bastion > yeoman-generator > findup-sync > glob > minimatch: + patched: '2017-06-07T13:29:27.096Z' + - generator-bastion > yeoman-generator > file-utils > findup-sync > glob > minimatch: + patched: '2017-06-07T13:29:27.096Z' + - grunt-bower-task > bower > glob > minimatch: + patched: '2017-06-07T13:29:27.096Z' + - grunt-htmlhint > htmlhint > jshint > minimatch: + patched: '2017-06-07T13:29:27.096Z' + 'npm:ms:20170412': + - karma > socket.io > debug > ms: + patched: '2017-06-07T13:29:27.096Z' + - karma > socket.io > engine.io > debug > ms: + patched: '2017-06-07T13:29:27.096Z' + - karma > socket.io > socket.io-adapter > debug > ms: + patched: '2017-06-07T13:29:27.096Z' + - karma > socket.io > socket.io-client > debug > ms: + patched: '2017-06-07T13:29:27.096Z' + - karma > socket.io > socket.io-client > engine.io-client > debug > ms: + patched: '2017-06-07T13:29:27.096Z' + - karma > socket.io > socket.io-parser > debug > ms: + patched: '2017-06-07T13:29:27.096Z' + - karma > socket.io > socket.io-adapter > socket.io-parser > debug > ms: + patched: '2017-06-07T13:29:27.096Z' + - karma > socket.io > socket.io-client > socket.io-parser > debug > ms: + patched: '2017-06-07T13:29:27.096Z' + 'npm:qs:20140806-1': + - generator-bastion > yeoman-generator > request > qs: + patched: '2017-06-07T13:29:27.096Z' + 'npm:request:20160119': + - generator-bastion > yeoman-generator > request: + patched: '2017-06-07T13:29:27.096Z' + - grunt-bower-task > bower > request: + patched: '2017-06-07T13:29:27.096Z' + - grunt-bower-task > bower > bower-registry-client > request: + patched: '2017-06-07T13:29:27.096Z' + 'npm:semver:20150403': + - grunt-bower-task > bower > semver: + patched: '2017-06-07T13:29:27.096Z' + 'npm:tar:20151103': + - generator-bastion > yeoman-generator > download > decompress > tar: + patched: '2017-06-07T13:29:27.096Z' + 'npm:uglify-js:20151024': + - grunt-bower-task > bower > handlebars > uglify-js: + patched: '2017-06-07T13:29:27.096Z' diff --git a/package.json b/package.json index 9d89fcb8a..a80fc72ad 100644 --- a/package.json +++ b/package.json @@ -2,14 +2,14 @@ "name": "bastion", "version": "0.1.0", "dependencies": { - "eslint": "~0.14.1", + "eslint": "~1.9.0", "eslint-plugin-angular": "0.0.3", "generator-bastion": "~0.1.2", - "grunt": "~0.4.5", + "grunt": "~1.0.0", "grunt-angular-gettext": "~0.2.15", "grunt-bower-task": "yatskevich/grunt-bower-task#v0.5.0", "grunt-concurrent": "~1.0.0", - "grunt-eslint": "~6.0.0", + "grunt-eslint": "~17.0.0", "grunt-htmlhint": "~0.4.1", "grunt-karma": "^1.0.0", "jasmine-core": "^2.4.1", @@ -19,7 +19,8 @@ "karma-ng-html2js-preprocessor": "^1.0.0", "karma-phantomjs-launcher": "^1.0.0", "require-dir": "~0.1.0", - "phantomjs-prebuilt": "2.1.10" + "phantomjs-prebuilt": "2.1.10", + "snyk": "^1.34.3" }, "engines": { "node": ">=0.8.0" @@ -29,6 +30,9 @@ "lib": "./grunt" }, "scripts": { - "postinstall": "bower install" - } + "postinstall": "bower install", + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" + }, + "snyk": true }