From d4e5322806d1d2973d9896c9f96f24ceb28470ea Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 20 Mar 2017 09:33:43 +0000 Subject: [PATCH] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:qs:20170213 Latest report for nicolaspio/laravel-elixir-jscs-wrapper: https://snyk.io/test/github/nicolaspio/laravel-elixir-jscs-wrapper --- .snyk | 8 +++++++- package.json | 2 +- 2 files changed, 8 insertions(+), 2 deletions(-) diff --git a/.snyk b/.snyk index ed91a10..f48e3e1 100644 --- a/.snyk +++ b/.snyk @@ -1,9 +1,12 @@ -version: v1.5.0 +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.7.0 +# ignores vulnerabilities until expiry date; change duration by modifying expiry date ignore: 'npm:shell-quote:20160621': - laravel-elixir > browserify > shell-quote: reason: None given expires: '2016-10-01T19:17:18.705Z' +# patches apply the minimum changes required to fix a vulnerability patch: 'npm:minimatch:20160620': - laravel-elixir > browserify > glob > minimatch: @@ -18,3 +21,6 @@ patch: patched: '2016-09-01T19:17:18.824Z' - laravel-elixir > gulp-phpunit > gulp > vinyl-fs > glob-watcher > gaze > globule > glob > minimatch: patched: '2016-09-01T19:17:18.824Z' + 'npm:qs:20170213': + - laravel-elixir > browser-sync > qs: + patched: '2017-03-20T09:33:42.999Z' diff --git a/package.json b/package.json index bbfb527..ba5b62e 100644 --- a/package.json +++ b/package.json @@ -7,7 +7,7 @@ "gulp-jscs": "2.0.0", "laravel-elixir": "4.0.1", "gulp-notify": "^2.2.0", - "snyk": "^1.19.1" + "snyk": "^1.25.2" }, "devDependencies": {}, "scripts": {