Merge pull request zen-audio-player#302 from zen-audio-player/snyk

Add Snyk to Travis, replaces zen-audio-player#300

.snyk

@@ -0,0 +1,9 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.12.0
+# ignores vulnerabilities until expiry date; change duration by modifying expiry date
+ignore:
+  'npm:qs:20170213':
+    - http-server > union > qs:
+        reason: 'No Patch or Upgrade available '
+        expires: '2018-11-12T10:52:02.751Z'
+patch: {}

.travis.yml

@@ -1,11 +1,21 @@
 language: node_js
+install:
+- npm install
+after_success:
+- npm run snyk-monitor
+cache:
+  directories:
+  - "$HOME/.npm"
 notifications:
   email: false
   webhooks:
     urls:
-      - https://webhooks.gitter.im/e/789c495ac457dab0ae54
+    - https://webhooks.gitter.im/e/789c495ac457dab0ae54
   on_success: always
   on_failure: always
 node_js:
 - 8
 - 10
+env:
+  global:
+    secure: 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

README.md

@@ -5,6 +5,7 @@
 [![Build Status](https://travis-ci.org/zen-audio-player/zen-audio-player.github.io.svg?branch=master)](https://travis-ci.org/zen-audio-player/zen-audio-player.github.io)
 [![Code Climate](https://codeclimate.com/github/zen-audio-player/zen-audio-player.github.io/badges/gpa.svg)](https://codeclimate.com/github/zen-audio-player/zen-audio-player.github.io)
 [![Issue Count](https://codeclimate.com/github/zen-audio-player/zen-audio-player.github.io/badges/issue_count.svg)](https://codeclimate.com/github/zen-audio-player/zen-audio-player.github.io)
+[![Known Vulnerabilities](https://snyk.io/test/github/zen-audio-player/zen-audio-player.github.io/badges/badge.svg)](https://snyk.io/test/github/zen-audio-player/zen-audio-player.github.io/badges)
 
 Listen to YouTube videos, without the distracting visuals.
 

package.json

@@ -11,9 +11,10 @@
     "stylelint:css": "stylelint css/*.css",
     "lint": "npm run lint:js && npm run lint:html && npm run lint:css && npm run lint:tests",
     "pretest": "npm run stylelint:css && npm run lint",
-    "test": "mocha",
+    "test": "snyk test && mocha",
     "exp-fix:js": "eslint js/everything.js --fix",
-    "start": "http-server --cors -o -a localhost"
+    "start": "http-server --cors -o -a localhost",
+    "snyk-monitor": "snyk monitor"
   },
   "repository": {
     "type": "git",
@@ -36,6 +37,7 @@
     "eslint": "^5.4.0",
     "htmlhint": "^0.10.1",
     "mocha": "^5.2.0",
+    "snyk": "^1.104.1",
     "stylelint": "^9.5.0",
     "zombie": "^6.1.3"
   },