diff --git a/.snyk b/.snyk index a27b860..f9535a4 100644 --- a/.snyk +++ b/.snyk @@ -1,3 +1,5 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +# patches apply the minimum changes required to fix a vulnerability patch: 'npm:uglify-js:20150824': - jade > transformers > uglify-js: @@ -24,7 +26,13 @@ patch: patched: '2016-07-03T13:48:08.042Z' - forever-monitor > chokidar > fsevents > node-pre-gyp > tar-pack > fstream-ignore > minimatch: patched: '2016-07-03T13:48:08.042Z' -version: v1.5.0 + SNYK-JS-HTTPSPROXYAGENT-469131: + - snyk > proxy-agent > https-proxy-agent: + patched: '2019-10-07T01:36:14.924Z' + - snyk > proxy-agent > pac-proxy-agent > https-proxy-agent: + patched: '2019-10-07T01:36:14.924Z' +version: v1.13.5 +# ignores vulnerabilities until expiry date; change duration by modifying expiry date ignore: 'npm:minimatch:20160620': - mocha > glob > minimatch: diff --git a/package.json b/package.json index 65247e6..49db62e 100644 --- a/package.json +++ b/package.json @@ -27,7 +27,7 @@ "request": "^2.69.0", "serve-favicon": "~2.3.0", "should": "^8.2.2", - "snyk": "^1.14.2", + "snyk": "^1.231.0", "supertest": "^2.0.0" }, "engines": {