From 21f43becaa2be90bea3a78bb1b17863b27d238aa Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 18 Jun 2018 23:04:33 +0000 Subject: [PATCH] fix: vision/.snyk & vision/package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/npm:hoek:20180212 The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:hoek:20180212 --- vision/.snyk | 14 ++++++++++++++ vision/package.json | 10 +++++++--- 2 files changed, 21 insertions(+), 3 deletions(-) create mode 100644 vision/.snyk diff --git a/vision/.snyk b/vision/.snyk new file mode 100644 index 0000000000..fbfcadae2a --- /dev/null +++ b/vision/.snyk @@ -0,0 +1,14 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.12.0 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:hoek:20180212': + - natural > log4js > loggly > request > hawk > hoek: + patched: '2018-06-18T23:04:31.859Z' + - natural > log4js > loggly > request > hawk > boom > hoek: + patched: '2018-06-18T23:04:31.859Z' + - natural > log4js > loggly > request > hawk > sntp > hoek: + patched: '2018-06-18T23:04:31.859Z' + - natural > log4js > loggly > request > hawk > cryptiles > boom > hoek: + patched: '2018-06-18T23:04:31.859Z' diff --git a/vision/package.json b/vision/package.json index b8097ec80e..d9e2a0535d 100644 --- a/vision/package.json +++ b/vision/package.json @@ -5,7 +5,9 @@ "license": "Apache Version 2.0", "author": "Google Inc.", "scripts": { - "test": "cd ..; npm run st -- --verbose vision/system-test/*.test.js" + "test": "cd ..; npm run st -- --verbose vision/system-test/*.test.js", + "snyk-protect": "snyk protect", + "prepare": "npm run snyk-protect" }, "dependencies": { "@google-cloud/storage": "0.7.0", @@ -13,12 +15,14 @@ "async": "2.1.4", "natural": "0.4.0", "redis": "2.6.5", - "yargs": "6.6.0" + "yargs": "6.6.0", + "snyk": "^1.83.0" }, "optionalDependencies": { "canvas": "1.6.2" }, "engines": { "node": ">=4.3.2" - } + }, + "snyk": true }