diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..a34f961 --- /dev/null +++ b/.snyk @@ -0,0 +1,11 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.10.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:moment:20170905': + - chart.js > moment: + patched: '2017-12-16T18:27:48.796Z' + 'npm:uglify-js:20151024': + - swig > uglify-js: + patched: '2017-12-16T18:27:48.796Z' diff --git a/package.json b/package.json index b84e3d5..b6effe7 100644 --- a/package.json +++ b/package.json @@ -3,7 +3,9 @@ "version": "1.0.1", "description": "Admin dashboard with several UI components", "scripts": { - "start": "node server" + "start": "node server", + "snyk-protect": "snyk protect", + "prepare": "npm run snyk-protect" }, "repository": "git+https://github.com/sethbergman/admin-portal.git", "author": "Seth Bergman", @@ -30,12 +32,14 @@ "busboy": "^0.2.14", "chart.js": "^2.7.1", "consolidate": "^0.14.5", - "express": "^3.21.2", + "express": "^4.16.0", "jsonwebtoken": "^7.4.1", "node-sass-middleware": "^0.11.0", "passport": "^0.3.2", "path": "^0.12.7", "swig": "^1.4.2", - "winston": "^2.3.1" - } + "winston": "^2.3.1", + "snyk": "^1.59.1" + }, + "snyk": true }