From e3343d1a336dbfb2a6e41f8136e459ee70eef412 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 4 May 2020 21:40:41 -0400 Subject: [PATCH 1/2] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 5d5b6e0..f292b15 100644 --- a/package.json +++ b/package.json @@ -31,7 +31,7 @@ "underscore": "^1.8.3", "watchify": "^3.6.1", "yamljs": "^0.2.4", - "snyk": "^1.41.1" + "snyk": "^1.317.0" }, "snyk": true } From af7e697e202ed540ede39346c9c352c75cdeaebd Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 4 May 2020 21:40:42 -0400 Subject: [PATCH 2/2] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- .snyk | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/.snyk b/.snyk index 2b58f27..c0bd28d 100644 --- a/.snyk +++ b/.snyk @@ -1,5 +1,5 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.7.1 +version: v1.14.1 ignore: {} # patches apply the minimum changes required to fix a vulnerability patch: @@ -8,3 +8,8 @@ patch: patched: '2017-09-26T06:47:08.890Z' - gulp-mocha > mocha > debug: patched: '2017-09-26T06:47:08.890Z' + SNYK-JS-LODASH-567746: + - jshint > lodash: + patched: '2020-05-05T01:40:38.485Z' + - gulp-jshint > jshint > lodash: + patched: '2020-05-05T01:40:38.485Z'