From 7f5414595830322c009a1210b4a1ed20771dc5bc Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 25 Mar 2022 17:22:20 +0000 Subject: [PATCH] fix: package.json, package-lock.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- .snyk | 42 ++++++++++++++++++++++++++++++++++++++++++ package-lock.json | 5 +++++ package.json | 10 +++++++--- 3 files changed, 54 insertions(+), 3 deletions(-) create mode 100644 .snyk diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..0deca65 --- /dev/null +++ b/.snyk @@ -0,0 +1,42 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.22.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - '@bit/a13marquez.styled-components.styled-transparent-button > styled-components > @babel/traverse > lodash': + patched: '2022-03-25T17:22:07.542Z' + - '@bit/a13marquez.styled-components.styled-transparent-button > styled-components > babel-plugin-styled-components > lodash': + patched: '2022-03-25T17:22:07.542Z' + - '@bit/a13marquez.styled-components.styled-transparent-button > styled-components > @babel/traverse > @babel/generator > lodash': + patched: '2022-03-25T17:22:07.542Z' + - '@bit/a13marquez.styled-components.styled-title-row > @bit/a13marquez.styled-components.styled-standard-row > styled-components > @babel/traverse > lodash': + patched: '2022-03-25T17:22:07.542Z' + - '@bit/a13marquez.styled-components.styled-title-row > @bit/a13marquez.styled-components.styled-standard-row > styled-components > babel-plugin-styled-components > lodash': + patched: '2022-03-25T17:22:07.542Z' + - '@bit/a13marquez.styled-components.styled-transparent-button > styled-components > babel-plugin-styled-components > @babel/helper-annotate-as-pure > @babel/types > lodash': + patched: '2022-03-25T17:22:07.542Z' + - '@bit/a13marquez.styled-components.styled-title-row > @bit/a13marquez.styled-components.styled-standard-row > styled-components > @babel/traverse > @babel/generator > lodash': + patched: '2022-03-25T17:22:07.542Z' + - '@bit/a13marquez.styled-components.styled-transparent-button > styled-components > @babel/traverse > @babel/helper-split-export-declaration > @babel/types > lodash': + patched: '2022-03-25T17:22:07.542Z' + - '@bit/a13marquez.styled-components.styled-title-row > @bit/a13marquez.styled-components.styled-standard-row > @bit/a13marquez.styled-components.shared-styles > styled-components > @babel/traverse > lodash': + patched: '2022-03-25T17:22:07.542Z' + - '@bit/a13marquez.styled-components.styled-title-row > @bit/a13marquez.styled-components.styled-standard-row > @bit/a13marquez.styled-components.shared-styles > styled-components > babel-plugin-styled-components > lodash': + patched: '2022-03-25T17:22:07.542Z' + - '@bit/a13marquez.styled-components.styled-title-row > @bit/a13marquez.styled-components.styled-standard-row > styled-components > babel-plugin-styled-components > @babel/helper-annotate-as-pure > @babel/types > lodash': + patched: '2022-03-25T17:22:07.542Z' + - '@bit/a13marquez.styled-components.styled-title-row > @bit/a13marquez.styled-components.styled-standard-row > @bit/a13marquez.styled-components.shared-styles > styled-components > @babel/traverse > @babel/generator > lodash': + patched: '2022-03-25T17:22:07.542Z' + - '@bit/a13marquez.styled-components.styled-title-row > @bit/a13marquez.styled-components.styled-standard-row > styled-components > @babel/traverse > @babel/helper-split-export-declaration > @babel/types > lodash': + patched: '2022-03-25T17:22:07.542Z' + - '@bit/a13marquez.styled-components.styled-transparent-button > styled-components > @babel/traverse > @babel/helper-function-name > @babel/template > @babel/types > lodash': + patched: '2022-03-25T17:22:07.542Z' + - '@bit/a13marquez.styled-components.styled-title-row > @bit/a13marquez.styled-components.styled-standard-row > @bit/a13marquez.styled-components.shared-styles > styled-components > babel-plugin-styled-components > @babel/helper-annotate-as-pure > @babel/types > lodash': + patched: '2022-03-25T17:22:07.542Z' + - '@bit/a13marquez.styled-components.styled-title-row > @bit/a13marquez.styled-components.styled-standard-row > @bit/a13marquez.styled-components.shared-styles > styled-components > @babel/traverse > @babel/helper-split-export-declaration > @babel/types > lodash': + patched: '2022-03-25T17:22:07.542Z' + - '@bit/a13marquez.styled-components.styled-title-row > @bit/a13marquez.styled-components.styled-standard-row > styled-components > @babel/traverse > @babel/helper-function-name > @babel/template > @babel/types > lodash': + patched: '2022-03-25T17:22:07.542Z' + - '@bit/a13marquez.styled-components.styled-title-row > @bit/a13marquez.styled-components.styled-standard-row > @bit/a13marquez.styled-components.shared-styles > styled-components > @babel/traverse > @babel/helper-function-name > @babel/template > @babel/types > lodash': + patched: '2022-03-25T17:22:07.542Z' diff --git a/package-lock.json b/package-lock.json index 6890104..afb1862 100644 --- a/package-lock.json +++ b/package-lock.json @@ -2507,6 +2507,11 @@ "integrity": "sha512-lu8BpxjAtRCAo5ifytTpCPCj99LF7o/2Myn+NXyNCBqvPYn7Pjd76AMmUB5l7XF1U6t0hcWrlEM5ESufW7wAeA==", "dev": true }, + "@snyk/protect": { + "version": "1.883.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.883.0.tgz", + "integrity": "sha512-N/EqG6P/qNYWOfuZAfGS1d7yGwGY4zV7AvKtgTzdhazDt7G/mRLG6czLSWNWGEFYBiMsYRVPHdc5It3bjhmIGw==" + }, "@teambit/gitconfig": { "version": "2.0.6", "resolved": "https://registry.npmjs.org/@teambit/gitconfig/-/gitconfig-2.0.6.tgz", diff --git a/package.json b/package.json index 044373c..05c4330 100644 --- a/package.json +++ b/package.json @@ -11,7 +11,9 @@ "test": "jest --updateSnapshot --no-cache", "test:watch": "jest --updateSnapshot --watch", "lint": "eslint **/*.ts[x]", - "lint:fix": "eslint ./src/*.ts[x] --fix" + "lint:fix": "eslint ./src/*.ts[x] --fix", + "prepare": "npm run snyk-protect", + "snyk-protect": "snyk-protect" }, "repository": { "type": "git", @@ -87,6 +89,8 @@ "react-dom": "^16.13.0", "redux": "^4.0.5", "react-redux": "^7.2.0", - "redux-logger": "^3.0.6" - } + "redux-logger": "^3.0.6", + "@snyk/protect": "latest" + }, + "snyk": true }