diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..f622185 --- /dev/null +++ b/.snyk @@ -0,0 +1,11 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.13.5 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:debug:20170905': + - eslint-plugin-import > eslint-module-utils > debug: + patched: '2019-09-15T00:55:24.885Z' + 'npm:ms:20170412': + - eslint-plugin-import > eslint-module-utils > debug > ms: + patched: '2019-09-15T00:55:24.885Z' diff --git a/package.json b/package.json index c4b44eb..c3fe445 100644 --- a/package.json +++ b/package.json @@ -12,7 +12,7 @@ "autoprefixer": "6.7.2", "babel-core": "6.22.1", "babel-eslint": "7.1.1", - "babel-jest": "18.0.0", + "babel-jest": "19.0.0", "babel-loader": "6.2.10", "babel-preset-react-app": "^2.1.0", "babel-runtime": "^6.20.0", @@ -20,9 +20,9 @@ "chalk": "1.1.3", "connect-history-api-fallback": "1.3.0", "cross-spawn": "4.0.2", - "css-loader": "0.26.1", + "css-loader": "1.0.0", "detect-port": "1.0.1", - "eslint": "3.8.1", + "eslint": "4.18.2", "eslint-config-react-app": "^0.5.1", "eslint-loader": "1.6.0", "eslint-plugin-flowtype": "2.21.0", @@ -35,8 +35,8 @@ "fs-extra": "0.30.0", "gzip-size": "3.0.0", "html-webpack-plugin": "2.24.0", - "http-proxy-middleware": "0.17.3", - "jest": "18.1.0", + "http-proxy-middleware": "0.18.0", + "jest": "23.0.0", "json-loader": "0.5.4", "object-assign": "4.1.1", "postcss-import": "^9.1.0", @@ -48,16 +48,19 @@ "recursive-readdir": "2.1.0", "strip-ansi": "3.0.1", "style-loader": "0.13.1", - "url-loader": "0.5.7", - "webpack": "1.14.0", - "webpack-dev-server": "1.16.2", + "url-loader": "0.6.0", + "webpack": "2.2.0", + "webpack-dev-server": "3.1.11", "webpack-manifest-plugin": "1.1.0", - "whatwg-fetch": "2.0.2" + "whatwg-fetch": "2.0.2", + "snyk": "^1.226.2" }, "scripts": { "start": "node scripts/start.js", "build": "node scripts/build.js", - "test": "node scripts/test.js --env=jsdom" + "test": "node scripts/test.js --env=jsdom", + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" }, "jest": { "collectCoverageFrom": [ @@ -93,5 +96,6 @@ }, "eslintConfig": { "extends": "react-app" - } + }, + "snyk": true }