Skip to content
This repository was archived by the owner on Sep 7, 2020. It is now read-only.

Commit 58dbc6b

Browse files
snyk-botmergify[bot]
authored andcommitted
fix: package.json, package-lock.json & .snyk to reduce vulnerabilities
The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746
1 parent 6d4ab7f commit 58dbc6b

File tree

2 files changed

+4
-2
lines changed

2 files changed

+4
-2
lines changed

.snyk

+3-1
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
2-
version: v1.14.1
2+
version: v1.19.0
33
ignore: {}
44
# patches apply the minimum changes required to fix a vulnerability
55
patch:
@@ -16,3 +16,5 @@ patch:
1616
patched: '2020-04-30T21:22:11.242Z'
1717
- styled-components > @babel/traverse > @babel/helper-function-name > @babel/template > @babel/types > lodash:
1818
patched: '2020-04-30T21:22:11.242Z'
19+
- snyk > snyk-nodejs-lockfile-parser > @yarnpkg/core > lodash:
20+
patched: '2020-08-28T17:01:44.064Z'

package.json

+1-1
Original file line numberDiff line numberDiff line change
@@ -76,7 +76,7 @@
7676
"react-dom": "16.13.1",
7777
"react-feather": "2.0.8",
7878
"showdown": "1.9.1",
79-
"snyk": "1.386.0",
79+
"snyk": "^1.386.0",
8080
"styled-components": "5.1.1",
8181
"uuid": "8.3.0"
8282
},

0 commit comments

Comments
 (0)