diff --git a/packages/edition-node/.snyk b/packages/edition-node/.snyk new file mode 100644 index 000000000..c556b5efa --- /dev/null +++ b/packages/edition-node/.snyk @@ -0,0 +1,8 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.13.5 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-HTTPSPROXYAGENT-469131: + - '@pattern-lab/uikit-workshop > prerender-spa-plugin > @prerenderer/renderer-puppeteer > puppeteer > https-proxy-agent': + patched: '2019-10-03T23:03:50.381Z' diff --git a/packages/edition-node/package.json b/packages/edition-node/package.json index dbac62d7b..c46bcd83f 100644 --- a/packages/edition-node/package.json +++ b/packages/edition-node/package.json @@ -6,7 +6,8 @@ "dependencies": { "@pattern-lab/core": "^3.0.0-alpha.11", "@pattern-lab/engine-mustache": "^2.0.0-alpha.5", - "@pattern-lab/uikit-workshop": "^1.0.0-alpha.4" + "@pattern-lab/uikit-workshop": "^1.0.0-alpha.4", + "snyk": "^1.230.5" }, "keywords": [ "Pattern Lab", @@ -20,7 +21,9 @@ "scripts": { "build": "node ./scripts/build.js", "help": "node ./scripts/help.js", - "serve": "node ./scripts/serve.js" + "serve": "node ./scripts/serve.js", + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" }, "license": "MIT", "engines": { @@ -28,5 +31,6 @@ }, "publishConfig": { "access": "public" - } + }, + "snyk": true }