diff --git a/.snyk b/.snyk new file mode 100644 index 00000000..012c67f4 --- /dev/null +++ b/.snyk @@ -0,0 +1,8 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.25.0 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:semver:20150403': + - rollup-plugin-node-builtins > browserify-fs > levelup > semver: + patched: '2023-03-24T15:16:42.469Z' diff --git a/package.json b/package.json index 632bad0c..a1407bab 100644 --- a/package.json +++ b/package.json @@ -17,7 +17,9 @@ "lint": "node src lint", "format": "node src format", "validate": "node src validate", - "precommit": "node src precommit" + "precommit": "node src precommit", + "prepublish": "npm run snyk-protect", + "snyk-protect": "snyk-protect" }, "files": [ "dist", @@ -31,7 +33,7 @@ "author": "Kent C. Dodds (http://kentcdodds.com/)", "license": "MIT", "dependencies": { - "all-contributors-cli": "^4.10.1", + "all-contributors-cli": "^5.10.2", "arrify": "^1.0.1", "babel-cli": "^6.26.0", "babel-jest": "^22.0.4", @@ -51,12 +53,12 @@ "cross-spawn": "^5.1.0", "doctoc": "^1.3.0", "eslint": "^4.14.0", - "eslint-config-kentcdodds": "^13.0.1", + "eslint-config-kentcdodds": "^19.0.0", "eslint-config-prettier": "^2.9.0", "glob": "^7.1.2", "husky": "^0.14.3", "is-ci": "^1.1.0", - "jest": "^22.0.4", + "jest": "^23.0.0", "lint-staged": "^6.0.0", "lodash.camelcase": "^4.3.0", "lodash.has": "^4.5.2", @@ -76,10 +78,14 @@ "rollup-plugin-replace": "^2.0.0", "rollup-plugin-uglify": "^2.0.1", "which": "^1.3.0", - "yargs-parser": "^8.1.0" + "yargs-parser": "^8.1.0", + "@snyk/protect": "latest" }, "eslintConfig": { - "extends": ["kentcdodds", "kentcdodds/jest"], + "extends": [ + "kentcdodds", + "kentcdodds/jest" + ], "rules": { "no-process-exit": "off", "import/no-dynamic-require": "off", @@ -88,7 +94,11 @@ "no-nested-ternary": "off" } }, - "eslintIgnore": ["node_modules", "coverage", "dist"], + "eslintIgnore": [ + "node_modules", + "coverage", + "dist" + ], "repository": { "type": "git", "url": "https://github.com/kentcdodds/kcd-scripts.git" @@ -100,5 +110,6 @@ "devDependencies": { "jest-in-case": "^1.0.2", "slash": "^1.0.0" - } + }, + "snyk": true }