From 37194f8e945bf1e6bc235852e011dd95d3c2a4ba Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 29 Sep 2017 02:19:06 +0000 Subject: [PATCH] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/npm:debug:20170905 - https://snyk.io/vuln/npm:debug:20170905 - https://snyk.io/vuln/npm:mime:20170907 - https://snyk.io/vuln/npm:debug:20170905 - https://snyk.io/vuln/npm:fresh:20170908 - https://snyk.io/vuln/npm:fresh:20170908 The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:debug:20170905 Latest report for telefonicaid/fiware-aiakos: https://snyk.io/test/github/telefonicaid/fiware-aiakos --- .snyk | 8 ++++++++ package.json | 18 +++++++++++------- 2 files changed, 19 insertions(+), 7 deletions(-) create mode 100644 .snyk diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..0525c3c --- /dev/null +++ b/.snyk @@ -0,0 +1,8 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.7.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:debug:20170905': + - domain > eventstore > debug: + patched: '2017-09-29T02:19:06.649Z' diff --git a/package.json b/package.json index 7de8a2d..4b3e662 100644 --- a/package.json +++ b/package.json @@ -4,16 +4,18 @@ "private": true, "scripts": { "start": "node ./bin/www", - "test": "grunt test" + "test": "grunt test", + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" }, "dependencies": { "assert": "^1.3.0", - "body-parser": "~1.13.2", + "body-parser": "~1.18.2", "cookie-parser": "~1.3.5", "cuid": "^1.3.8", - "debug": "~2.2.0", + "debug": "~2.6.9", "domain": "0.0.1", - "express": "~4.13.1", + "express": "~4.16.0", "express-domain-middleware": "^0.1.0", "forever": "^0.15.1", "fs": "0.0.2", @@ -22,8 +24,9 @@ "js-yaml": "^3.4.6", "logops": "^1.0.0-alpha.3", "optimist": "^0.6.1", - "serve-favicon": "~2.3.0", - "util": "^0.10.3" + "serve-favicon": "~2.4.5", + "util": "^0.10.3", + "snyk": "^1.41.1" }, "devDependencies": { "closure-linter-wrapper": "^0.2.11", @@ -44,5 +47,6 @@ "mocha": "^2.2.4", "sinon": "^1.17.2", "xunit-file": "^0.0.9" - } + }, + "snyk": true }