From cd2c6d0ccdd0aa5007b52a1ea6a79edcc87cde0d Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 7 Oct 2019 01:36:16 +0000 Subject: [PATCH] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-HTTPSPROXYAGENT-469131 --- .snyk | 10 +++++++++- package.json | 2 +- 2 files changed, 10 insertions(+), 2 deletions(-) diff --git a/.snyk b/.snyk index a27b860..f9535a4 100644 --- a/.snyk +++ b/.snyk @@ -1,3 +1,5 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +# patches apply the minimum changes required to fix a vulnerability patch: 'npm:uglify-js:20150824': - jade > transformers > uglify-js: @@ -24,7 +26,13 @@ patch: patched: '2016-07-03T13:48:08.042Z' - forever-monitor > chokidar > fsevents > node-pre-gyp > tar-pack > fstream-ignore > minimatch: patched: '2016-07-03T13:48:08.042Z' -version: v1.5.0 + SNYK-JS-HTTPSPROXYAGENT-469131: + - snyk > proxy-agent > https-proxy-agent: + patched: '2019-10-07T01:36:14.924Z' + - snyk > proxy-agent > pac-proxy-agent > https-proxy-agent: + patched: '2019-10-07T01:36:14.924Z' +version: v1.13.5 +# ignores vulnerabilities until expiry date; change duration by modifying expiry date ignore: 'npm:minimatch:20160620': - mocha > glob > minimatch: diff --git a/package.json b/package.json index 65247e6..49db62e 100644 --- a/package.json +++ b/package.json @@ -27,7 +27,7 @@ "request": "^2.69.0", "serve-favicon": "~2.3.0", "should": "^8.2.2", - "snyk": "^1.14.2", + "snyk": "^1.231.0", "supertest": "^2.0.0" }, "engines": {